Found from the login URLs - Unrestricted redirect vulnerability: https://www.capitalone.com/redirect/?dest=https%3A%2F%2Fgoogle.com https://www.capitalone.com/

Found from the login URLs - Unrestricted redirect vulnerability: https://www.capitalone.com/redirect/?dest=https%3A%2F%2Fgoogle.com https://www.capitalone.com/redirect/?dest=https%3A%2F%2Fgoog... Makes phishing links seems authentic. Who wants to report it to them?