Security Report: my.1password.vg - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5cf19ec5-b574-4054-a0f7-7ce74e2c7245 Domain and IP registration (RDAP)/api/v1/rdap/5cf19ec5-b574-4054-a0f7-7ce74e2c7245How often this domain was scanned/api/v1/domain/stats/my.1password.vg Scan history for this domain/api/v1/domain/history/my.1password.vg?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 15 HTTP transactions. The main domain is 1password.vg and was registered 4 weeks ago.

Submitted URL: https://my.1password.vg

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

9-day-old lookalike of 1Password's brand on a non-official domain whose own IP:port is flagged for Lumma stealer malware by two feeds; page is only a default hosting panel. Avoid.

Risk Factors (4)

Domain name impersonates the 1Password brand on a non-official TLD

Lumma stealer content-malware Indicator of Compromise on the site's own IP:port (2 feeds)

Domain registered 9 days ago and unranked

Host serves only a default hosting-panel placeholder page unrelated to the branded domain name

Domain age information unavailable

Details

Page Title

konsoleH :: Login

Scan Type

public

Domain Name Analysis

You're looking at domain 'my.1password.vg' on the .vg country-code top-level domain with subdomain 'my'. Count 9 characters in '1password' with 2 vowels and six consonants, along with one digit. Word splitting yields 2 words: 1, password. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

KONSOLE® ‘This domain does nat yet support HTTPS, Please add an SSL Certificate. You can find more information in the SSL guide Copyright konsuler 2004-2026 | Alle Rechie vorbehatien | [Impressum ]

Page Load Overview

2.59s

Total Load Time

12 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:52%

Script:Latin

Direction:ltr

Detection Details

Text Length:237 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical51% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

51%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	88.198.29.97	Nuremberg, Bavaria, Germany	AS24940Hetzner Online GmbH
7	78.46.152.77	Nuremberg, Bavaria, Germany	AS24940Hetzner Online GmbH
15	2	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D3C16990B9F5330EE9241494CB603EA68FC3902BC3360808B90E75BF5F589E658B763D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:sLOqYKiKGVKECQKQCQKlE0iLEhw3CIiX6QEazT/:sLOEfd1JZJn4SIxtuT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6069:IEABgKEAQUoAAAAOI2VKPGARoAMAAAgEIEBVwCISiAASAhQCEnBAAgHASUKhfCCZyQGSAkqJhUCIAgAAIYKUEQARmAbIkHgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7e7e7ffffff

Perceptual Hash:b33199cc66663399

Difference Hash:00101c0c04000000

Wavelet Hash:3c2c0000033f3f3f

Color Hash:N/A

Other Hashes

Crop Resistant:00101c0c04000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: my.1password.vg