Lookalike Domain Analysis

Detailed risk assessment for capitalone.re

Back to Report
Domain Information
Lookalike Domain
capitalone.re BLOCKED
Legitimate Domain (Target)
capitalone.com
Credit card and identity fraud
Registrar
OVH
Website Status
Offline
Detection Date
February 10, 2026 10:44
Domain Creation Date
Unknown
RDAP Takedown Status
Active
Discovery Method
Fuzzer
DNS Records
Nameservers
amir.ns.cloudflare.com., khloe.ns.cloudflare.com.
MX Records (Mail Servers)
route1.mx.cloudflare.net., route2.mx.cloudflare.net., route3.mx.cloudflare.net.
SPF Record (Email Authentication)
v=spf1 include:_spf.mx.cloudflare.net ~all
Risk Score Breakdown

This risk score shows how dangerous this lookalike domain is. Higher scores indicate more active threats. Each indicator below adds points to the score (max 100).

Talos Blacklist

Domain is on Cisco Talos intelligence blacklist

+30
Dangerous Registrar

Registrar 'OVH' not on dangerous list

+0
Dangerous Email Provider

MX record 'route1.mx.cloudflare.net., route2.mx.clo' not on dangerous list

+0
MX Records Configured

Email servers configured: route1.mx.cloudflare.net., route2.mx.cloudflare.ne...

+15
SPF Records

SPF authentication configured with sending directives

+15
Website is Live

Website status: Offline

+0
Website is Parked

Website status: Offline

+0
Website is Phishing

Website status: Offline

+0
Domain Age

Creation date unknown

+0
Total Score: 60 / 100
3 of 9 factors active
Threat Level
60 / 100
High Risk

High priority threat. Review the details below and consider takedown action.

Request Takedown
Risk Increase Detected
Score went from 30 to 60 · 1 month ago
Key Threat Signals
  • Talos Blacklisted Yes
  • Website Active No
  • Email Capability Enabled
  • Email Authentication Configured
  • Taken Down No
Related Threats

Other domains attacking capitalone.com

Remove This Threat

Our specialist team removes malicious domains in 24-48 hours.

Start Takedown Process
Daniel Hovasse
Need Help?
Contact our expert
Daniel Hovasse
Detect Lookalike Domains

Find domains that impersonate your brand. Scan for lookalike domains that could be used for phishing or fraud.

Scan for Lookalikes