capitalone.com email security: SPF, DKIM & DMARC
Is capitalone.com spoofable? See capitalone.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: June 3, 2026
SPF
OKv=spf1 ip4:148.163.151.254 ip4:148.163.155.198 ip4:148.163.137.70 ip4:148.163.133.70 ip4:205.220.175.235 ip4:205.220.163.236 ip4:27.126.144.0/21 ip4:64.106.247.198 ip4:66.70.7.91 ip4:68.233.76.14 ip4:97.107.118.192/26 ip4:63.150.74.35 include:gspf.capitalone.com include:gspf2.capitalone.com include:spf1.capitalone.com include:spf2.capitalone.com include:mir.capitalone.com include:sf.capitalone.com include:sf2.capitalone.com ~allDKIM
OKSelectors: k1, s1, s2DMARC
OKv=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:capital-one@rua.agari.com; ruf=mailto:capital-one@ruf.agari.comMX
OKmx0a-001b4103.pphosted.com, mx0b-001b4103.pphosted.comRecommendations
1Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Run a live analysis
The results above are updated daily. For an instant check of capitalone.com, run a live analysis.
Analyze capitalone.com liveFrequently asked questions about capitalone.com
Is capitalone.com spoofable?
No. capitalone.com is protected against email spoofing with a robust configuration. Email security score: 90/100 (grade A).
Does capitalone.com have an SPF record?
Yes, capitalone.com publishes an SPF record (~all qualifier).
What is capitalone.com's DMARC record?
capitalone.com publishes a DMARC record (_dmarc.capitalone.com) with a p=reject policy.
Does capitalone.com use DKIM?
Yes, DKIM signatures were detected for capitalone.com.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.