Is Xfinity Rewards email legit?

The message was sent to a third party email account that I provided when entering the sweepstakes, so I can’t confirm the digital signature. Will it show if I forward it? In the membership portal, it says that the sweepstakes has ended and that my entry has been received and will get an email if I win.

@Jrst1 In your third-party email (like Gmail or Outlook), click the "down arrow" or "details" next to the sender's name. Does the "mailed-by" or "signed-by" field show gmrmarketing.com? If so, that is a strong indicator of legitimacy.

@XfinityQuemekia​ Here is what it shows:

subject:		Congratulations on winning the Xfinity Sweepstakes!
mailed-by:		em8237.xfinityrewardswinners.com
signed-by:		xfinityrewardswinners.com
security:		Standard encryption (TLS)

Note that xfinityrewardswinners.com is owned by GMR Marketing, LLC when doing a lookup.

Those technical details are actually a great sign! Specifically, the domain xfinityrewardswinners.com is a verified secondary domain used by GMR Marketing to manage the fulfillment of large scale sweepstakes for our Xfinity membership program. 

The legitimate GMR redemption site will never ask for your Xfinity password or any form of payment (like a "shipping fee").

@XfinityQuemekia​ The website asked to create an account to redeem the prize but it is separate from the Xfinity account and it did not ask for the Xfinity credentials. No credit cards or SSNs were asked for either. If this is the legitimate site, I recommend updating your membership FAQ page with the correct email and to train the phone agents on this so they’re aware. I would not be surprised if people have lost out on prizes because of this. CSA was certain that it was a phishing attempt.