Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/1password
Generated: Sat, 05 Sep 2026 10:53:09 GMT
Target Website: 1password.com
Overall Trust Score: 99/100 (Trusted)
1password.com
Trusted
Scanned: Sep 5, 10:53 AMTRUST SCORE
99
CONFIDENT
Low Risk
99/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
95/100
95/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
99/100 — trusted. Long-established domain (22.8 years old), clean threat reputation, no impersonation patterns. Verdict driven by: page has no <title>; large response served uncompressed — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
Standard Trusted CA
Threat Status
CleanClean
No blacklists or malware
Domain Age
22.8 years22.8 years
Registered 11/30/2003
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
172.66.1.143172.66.1.143
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
89 / 10089 / 100
Fast response time
Redirects
DirectDirect
No redirect hops
Top Priority RecommendationAction Needed
Page has no <title>
Well-maintained sites always set a page title.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- Site responded with 200
- HTTPS is enforced
- Fast response (16ms)
- Served through Cloudflare
- 4 address record(s) resolved
- IPv6 (AAAA) available
- 4 authoritative nameservers
- Domain registered 23+ years ago
Warnings
- Page has no <title>
- Large response served uncompressed
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- Tucows Domains Inc.
- Creation Date
- November 30, 2003 (22.8 years ago)
- Last Updated
- December 5, 2017
- Registry Expiry Date
- March 28, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited, client update prohibited
ICANN Status Badges
client transfer prohibitedclient update prohibited
Domain registered 23+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Tucows Domains Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: X-Frame-Optionsmissing: Permissions Policy
All Response Headers (22)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 172.66.1.143, 162.159.141.147
- IPv6 Addresses (AAAA)
- 2a06:98c1:58::18b, 2606:4700:7::18b
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), aspmx2.googlemail.com (Priority: 10), aspmx3.googlemail.com (Priority: 10)
- Authoritative Nameservers (NS)
- ns-109.awsdns-13.com, ns-1527.awsdns-62.org, ns-1850.awsdns-39.co.uk, ns-671.awsdns-19.net
- TXT Records Found
- 13 TXT verification records
A Records (IPv4)
172.66.1.143162.159.141.147
TXT Verification Records
ZOOM_verify_44FY3372SduPLvaFPIZ0Ew
applause-verification:3f067522-d81e-42be-93ff-2833b37252a0
atlassian-domain-verification=zEDqI3YswrgMZJy873D6K9bzyKfQxQ/LLgRUaYKpuBfopmfKAKmmbtVmsaXenwhL
docker-verification=a6d7f91c-0a2e-4b80-8876-844dba1d10fd
drift-domain-verification=bdaaa706fff0eb1add57c356c7f37b60b1422130003ee059b3341f2629ee960d
google-site-verification=TNxb_ANhC-zhSys9M248xvF9D51n6Pwk7dcoyu4AHXY
google-site-verification=bY2iMqY6UMv2hfJ9D2s3GyQ7Is0eL0FC4SIbHAgcOxA
meltwater_sso_20240909_TRITON-23089
openai-domain-verification=dv-hWqtHIdY5udUIyKW28N4kF3E
rZO5Xi3YrwFXskWxgXMtvPByIs2f-A
reachdesk-verification=zg9Ei6wxPAJTK705e2p3jd08Uis4dhnGDZfgHfynROjorx2P4W6AHLh5P4bnsyPO
status-page-domain-verification=l0fspqfdg9xc
v=spf1 include:_spf.google.com include:_spf.qualtrics.com include:_spf.sendergen.com include:amazonses.com include:mail.zendesk.com include:md02.com include:stspg-customer.com ip4:35.167.107.201 ~all
4 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
4 authoritative nameservers
+2
- Registrable Domain
- 1password.com
- Registrar Organization
- Tucows Domains Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited, client update prohibited
- Delegated Authoritative Nameservers
- ns-109.awsdns-13.com, ns-1527.awsdns-62.org, ns-1850.awsdns-39.co.uk, ns-671.awsdns-19.net
- Registration Lifecycle
- Registered: 2003 → Expires: 2027
Nameservers (NS)
ns-109.awsdns-13.comns-1527.awsdns-62.orgns-1850.awsdns-39.co.ukns-671.awsdns-19.net
Domain registered 23+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Tucows Domains Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:_spf.google.com include:_spf.qualtrics.com include:_spf.sendergen.com include:amazonses.com include:mail.zendesk.com include:md02.com include:stspg-customer.com ip4:35.167.107.201 ~all
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1; p=quarantine; sp=reject; rua=mailto:dmarc-reports@1password.com; ruf=mailto:dmarc-reports@1password.com; rf=afrf; adkim=r; aspf=r; pct=100; ri=86400;fo=1;
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (quarantine)
+4
DKIM configured (google, s1, s2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- 1password
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
framework
Next.js
js
Svelte
css
Tailwind CSS
analytics
Google Analytics
cdn
Cloudflare
hosting
Vercel
Page Metadata & Fingerprint
- HTML Title
- —
- Meta Description
- Protect passwords and secrets, manage app access, and secure AI tools with 1Password. Easy to adopt from growing teams to enterprise.
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1, maximum-scale=5.0, user-scalable=yes
- Generator Software
- —
6 technologies detected
Next.js, Svelte, Tailwind CSS, Google Analytics, Cloudflare, Vercel
Built on a modern framework
+3
Mobile viewport configured
+2
Page has no <title>
Well-maintained sites always set a page title.
-3
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 16 ms
- Payload Body Size
- 1131.4 KB
- Compression Status
- Uncompressed
- Cache Directives
- private, no-store, max-age=0, must-revalidate
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
AI Content Evaluation
99/100 — trusted. Long-established domain (22.8 years old), clean threat reputation, no impersonation patterns. Verdict driven by: page has no <title>; large response served uncompressed — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 443,452 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 172.66.1.143
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://1password.com/
- Redirect Hop Count
- 0 hops
Site responded with 200
Final URL: https://1password.com/. Response time 16ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (16ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- Standard Trusted CA
- Subject Common Name (CN)
- 1password.com
- Validity Period
- 60 days remaining (Expires: 2026-11-04T10:53:13.107Z)
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- 1 certs recorded
Subject Alternative Names (Sample)
1password.com
HTTPS encryption active & verified
Live TLS connection established successfully on port 443 with valid cipher suites.
+8
Key Legal & Transparency Pages
- Published Contact Emails
- business@1password.com, privacy@1password.com, u003eexample@yourdomain.com, alana.bailey@agilebits.com, conan.gormley@agilebits.com, danny.baynton@agilebits.com, emily.sousa@agilebits.com, godwill.ngube@agilebits.com, joel.mukuna@agilebits.com, josh.guitardmaraj@agilebits.com
- Published Phone Numbers
- 1511601750, 55585418645, 2026-01-29, 2964-23998, 7704.357362, 971.249860155
Privacy policy linked from home page
+6
Terms of service linked from home page
+5
Contact page linked from home page
+5
About page linked from home page
+3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
Cookie policy linked from home page
+2
4 social profile(s) linked
twitter, instagram, linkedin, github
+3
Contact email published
+2
Phone number published
+2
Physical address published
4711 Yonge St
+3
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://1password.com/sitemap.xml
- Disallow Rules Count
- 2 rules
View Raw robots.txt
User-agent: * Disallow: /en/site-monitoring-pages.xml Disallow: /files/1password-white-paper.pdf sitemap: https://1password.com/sitemap.xml
robots.txt published
+2
sitemap.xml available
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
44
This scan
Sources Checked
18
Live security feeds
Scan Duration
3.61s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk