Comcast (Xfinity)

Telecom & ISP United Statesxfinity.comRank 34 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
7
6 on phishing hosts · 1 on Spamhaus DROP
Registered lookalikes
178
19 listed by a source or an address list
Official domains
23
verified from Comcast (Xfinity)'s own sites and records

Certificate findings for Comcast (Xfinity)

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Comcast (Xfinity)'s name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 7 findings, grouped by hostname

  1. xfinitypassword.com US · AS46475 · Limestone Networks, Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    xfinitypassword.com
    First seen
    2026-11-04 09:04 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 216.245.213.76.
    1. Phishing-host list fetched with the address
    2. Resolved to 216.245.213.76
    Brand
    Comcast (Xfinity)
    Addresses
    216.245.213.76 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    77.247.182.243 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    Domain
    xfinitypassword.com
    Registered
    2018-09-04 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

  2. www.comcast.blog CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.comcast.blog
    First seen
    2026-11-01 10:11 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-01 09:09 UTC to 2027-01-30 09:09 UTC
    Logged 2026-11-01 10:07 UTC in Let's Encrypt Willow2027h1, entry 878,487,658
    SHA-256 ab32f45d336650832000ea97e754f078f77811fab838796c45dec580d6a7d1ea
    Public key SHA-256 15e44f566192c88890d8f98403ba67fb17d9c6e89477e45bec86fb1b924afdbe
    Brand
    Comcast (Xfinity)
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    comcast.blog
    Registered
    2026-08-10 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  3. comcast.blog CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    comcast.blog
    First seen
    2026-11-01 10:11 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-01 09:09 UTC to 2027-01-30 09:09 UTC
    Logged 2026-11-01 10:07 UTC in Let's Encrypt Willow2027h1, entry 878,487,658
    SHA-256 ab32f45d336650832000ea97e754f078f77811fab838796c45dec580d6a7d1ea
    Public key SHA-256 15e44f566192c88890d8f98403ba67fb17d9c6e89477e45bec86fb1b924afdbe
    Brand
    Comcast (Xfinity)
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    comcast.blog
    Registered
    2026-08-10 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  4. www.comcast-hr.my CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.comcast-hr.my
    First seen
    2026-10-31 04:06 UTC
    First published
    2026-10-31 05:05 UTC
    DNS
    Resolves · checked 2026-11-05 05:18 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-31 03:04 UTC to 2027-01-29 03:04 UTC
    Logged 2026-10-31 04:03 UTC in IPng Networks Halloumi2027h1, entry 318,215,411
    SHA-256 0b27651cd0b439c25ad49618df5dde0dab61daf5f89908b6a3dd707a6c71e6e0
    Public key SHA-256 f9e7c9dd37f75525a7e4e1bd2b6d2d7bba6588b13dbadfaadfa4c7bae0e43ef2
    Brand
    Comcast (Xfinity)
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    comcast-hr.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  5. comcast-hr.my CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    comcast-hr.my
    First seen
    2026-10-31 04:06 UTC
    First published
    2026-10-31 05:05 UTC
    DNS
    Resolves · checked 2026-11-05 05:18 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-31 03:04 UTC to 2027-01-29 03:04 UTC
    Logged 2026-10-31 04:03 UTC in IPng Networks Halloumi2027h1, entry 318,215,411
    SHA-256 0b27651cd0b439c25ad49618df5dde0dab61daf5f89908b6a3dd707a6c71e6e0
    Public key SHA-256 f9e7c9dd37f75525a7e4e1bd2b6d2d7bba6588b13dbadfaadfa4c7bae0e43ef2
    Brand
    Comcast (Xfinity)
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    comcast-hr.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  6. login-xfinity.com US · AS197769 · VPSDEDICATED-AS VPS Dedicat…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 6 d ago
    DetailsHide
    Hostname
    login-xfinity.com
    First seen
    2026-10-31 01:21 UTC
    First published
    2026-10-31 01:50 UTC
    DNS
    Resolves · checked 2026-11-05 01:55 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 102.220.160.222.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 102.220.160.222
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 00:21 UTC to 2027-01-29 00:21 UTC
    Logged 2026-10-31 01:19 UTC in IPng Networks Gouda2027h1, entry 274,543,867
    SHA-256 202a3c432fe13f3f28af87db4f4f9d7f08ecedc651bdbb2e64cf334ff40d999e
    Public key SHA-256 ee588f258a70f345aea10dd48db5b37dae1f24eb223c4fb58b523fabed2d613d
    Brand
    Comcast (Xfinity)
    Addresses
    102.220.160.222 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    Domain
    login-xfinity.com
    Registered
    2026-10-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  7. comcast.wasmer.app DE · AS213230 · HETZNER-CLOUD2-AS Hetzner O…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    comcast.wasmer.app
    First seen
    2026-10-29 11:06 UTC
    First published
    2026-10-29 11:56 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.161.23.223.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.161.23.223
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 10:02 UTC to 2027-01-27 10:02 UTC
    Logged 2026-10-29 11:01 UTC in Google ParcelYard2027h1, entry 504,478,837
    SHA-256 9ce0cd33ec2b08f038c5b43d7b88470d5c5c62db95e3a625ea7ab064b2cf643f
    Public key SHA-256 d7a68b65e1eeac672159b7035736d8bf9e185661f8354f0cc51fe07f366f7ae5
    Brand
    Comcast (Xfinity)
    Addresses
    5.161.23.223 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Comcast (Xfinity) when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Telecom & ISP

All brands →