Just a moment...

technology software

documentation technical

English

The domain name 'click-notification.capitalone.com' uses the commercial generic top-level domain (.com) with subdomain 'click-notification'. Its registrable label 'capitalone' stretches across 10 characters containing five vowels alongside five consonants. Tokenizing the label suggests two words: capital, one. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

html/2d/1c/2d1c1784-950a-41a5-8297-cbf912a63533.html.gz

default-src 'none'; script-src 'nonce-jvgZgDNyI2ggIMbD' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

82d697365135ffa2003c8d4a9faee6e24870ee10516e7a243e577cc6f56dd95f

0a71cce62d5aeeb113893d91f0f98361c0ed89936217925b967b0a1f6eab5e2b

dfc5622c733205e70c1b3b1b218a766e3efc4f5f5c7e2aca5ccc61e0373a892a

viewport

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

GoDaddy Corporate Domains, LLC

CAPITALONE.COM

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET

X-UA-Compatible

Cloudflare Bot Management

Cloudflare

✅ Low Risk - https://click-notification.capitalone.com/f/a/4HlWZ7Vwhxj9Ns_qzOtllg~~/AAAAARA~/FndA25xKVWfbE2uu2bjnAjHaicYdz11IR1BnDsK3e7z6O9R7en04T_jZCNkpq8ASdj-ZndK845T3mM8EeELpmispmvl6r-G28TutmE94Wk0qKSJuxRyTEFSge4B4xK8s

Requests	IP Address	Location	AS Autonomous System
4	104.18.95.41	United States	AS13335CLOUDFLARENET
2	104.18.9.206	United States	AS13335CLOUDFLARENET
2	104.18.94.41	United States	AS13335CLOUDFLARENET
2	104.18.8.206	United States	AS13335CLOUDFLARENET
10	4	-	-

Security Scan Report: click-notification.capitalone.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History