capitalone.co.uk

HTML metadata

Title: Capital One Credit Cards UK | Check Eligibility in 60 Seconds | Apply For A Credit Card Online
Description: Compare Capital One credit cards: classic, credit builder, balance transfers and credit cards for bad credit. Check eligibility with no impact on your credit score.
Language: en-GB
Canonical: https://www.capitalone.co.uk/

Open Graph

url: https://www.capitalone.co.uk/
title: Capital One Credit Cards UK | Check Eligibility in 60 Seconds | Apply For A Credit Card Online
locale: en_GB
site name: Capital One UK
description: Compare Capital One credit cards: classic, credit builder, balance transfers and credit cards for bad credit. Check eligibility with no impact on your credit score.

Technology

CDN: Amazon CloudFront
Server: server
CMS: Next.js

Third-party hosts loaded (1)

js-agent.newrelic.com×1

Social

Registration

Registrar

GoDaddy Corporate Domains LLC

Created

1998-07-23

Expires

2026-07-23 63 days left

Updated

2025-12-16

Name servers

a1-219.akam.net.
a18-66.akam.net.
a28-65.akam.net.
a3-64.akam.net.
a4-67.akam.net.
ns1.capitalone.com.
ns2.capitalone.com.
ns3.capitalone.com.
ns4.capitalone.com.
ns5.capitalone.com.

DNS records live

NS

a1-219.akam.net
a18-66.akam.net
a28-65.akam.net
a3-64.akam.net
a4-67.akam.net
a7-64.akam.net
ns1.capitalone.com
ns3.capitalone.com
ns4.capitalone.com
ns5.capitalone.com
ns6.capitalone.com

MX

10 mx0a-001b4101.pphosted.com
10 mx0b-001b4101.pphosted.com

TXT

Show 8 TXT records

yh962jh3mltx73l1f5tr6r94j2888dvx
pqvzp6kfy1mvwpjz72rjjvmnvgls09nk
393qptpf4csmprv0ll7cl9fxj577x3lv
dvglfc87f7zfcqjnfvbh7g0lhspmlg61
wzknnynb0654cq46399pfvlbcbn1zqz9
nqt9dwgnpzdvjlmm7v01vr7pllgsb6b3
2r1tml5c89yfhtxlkvty10pvq7s58sgl
qlr6d6n8ccdm5619czbpf81hqc78bzms

Email authentication strong

SPF: v=spf1 ip4:199.244.214.0/24 ip4:204.63.55.0/24 ip4:217.169.160.70 ip4:204.63.44.201 ip4:148.163.151.254 ip4:148.163.155.198 ?all
neutral (?all)
DMARC: v=DMARC1; p=reject; sp=reject; fo=1; pct=100; ri=3600; rua=mailto:capital-one@rua.agari.com; ruf=mailto:capital-one@ruf.agari.com
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

DigiCert EV RSA CA G2

from 2025-10-01 to 2026-09-17

Expires in 119 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.capitalone.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self';worker-src blob:;script-src 'unsafe-inline' 'self' 'unsafe-eval' *.amazon-adsystem.com https://www.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://connect.facebook.net https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net https://bam.eu01.nr-data.net https://bam-cell.eu01.nr-data.net https://s.yimg.com/wi/ytc.js https://cdn.quantummetric.com https://external.quantummetric.com;style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://fonts.googleapis.com https://external.quantummetric.com;connect-src 'self' *.paa-reporting-advertising.amazon *.amazon-adsystem.com https://*.google-analytics.com *.google-analytics.com https://api.zuko.io https://bat.bing.com https://*.analytics.google.com https://stats.g.doubleclick.net https://bam.nr-data.net https://bam-cell.nr-data.net https://bam.eu01.nr-data.net https://bam-cell.eu01.nr-data.net https://s.yimg.com *.quantummetric.com;img-src 'self' http
strict-transport-security: max-age=15778476