#Comcast has been intercepting #DNS and redirecting it to their own servers, which is why I could never verify #DNSSEC integrity from home until I switched to DNS over TLS. Now I run a caching DNS server that all my devices use (I also run my own DHCP server) and Comcast can piss right off.

https://isc.sans.edu/diary/30898

Detecting XFinity/Comcast DNS Spoofing - SANS Internet Storm Center

Detecting XFinity/Comcast DNS Spoofing, Author: Johannes Ullrich

^{SANS Internet Storm Center}