Security Scan Report: 1password.wearebit.workers.dev

Redirected to:
https://wearebit.1password.eu/signin
Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 3 countries across 9 domains to perform 105 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://1password.wearebit.workers.dev

Effective URL:
https://wearebit.1password.eu/signin
Redirected

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

This page on free hosting leads, one click in, to a sign-in form of the kind used to steal passwords — rated high risk on that basis.

Risk Factors (2)
Non-standard entry URL: the link was reached via a workers.dev subdomain named '1password.wearebit.workers.dev', a free instant-hosting namespace whose creation date is unknown and whose naming places the brand name early in the hostname — a construction often used to disguise redirect links.
The landing subdomain 'wearebit.1password.eu' is not in the Cisco Umbrella top 1M and its own creation date cannot be established (apex/tenant age is not attributable to it), so the page's provenance cannot be independently corroborated.
Domain age information unavailable

Details

Page Title

Login | 1Password — Password Manager for Teams, Businesses, and Families

Scan Type

public

Domain Name Analysis

Domain '1password.wearebit.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain '1password.wearebit'. Count 7 characters in 'workers' containing 2 vowels alongside five consonants. Tokenizing the label suggests one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Sign in to 1Password GUIDE How secure is my password? Use QR Code (2) Open 1Password on a mobile device where you're ‘ s signed in. B (2) Select the account icon or ont Password loge in the top...

Page Load Overview

3.97s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:884 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning40% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
153.77.211.68Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
6172.67.150.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
618.173.205.69Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6172.66.1.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
615.156.184.208Aws · CLOUDMontreal, Quebec, Canada
AS16509Amazon.com, Inc.
63.19.1.241Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
6100.24.155.99Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
618.194.52.82Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
618.173.205.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
618.173.205.42Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10516--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T140536B74D83D9D4CCD03695AF4DBEB85A001961EDCE9DACA8EF5C23603B9DADC21202D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:l0WoKcza+8vHEEloNj/4sC0Ar13RqCL6I4npP:igvkEKj/FUp1659

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:65447:QgABEvDQGoHsQETAmNbXVIAMOF5IqBgCihB4IAABFBcgARAUCSqvnQQA65ALquKKAGslApgMTaaAIiRYCLQCGKVKoCqhpohC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcfc84ecf8d8f8cc
Perceptual Hash:da17a5ccc0633a8f
Difference Hash:c931098991b1c999
Wavelet Hash:f8f888c8f8d8f8c8
Color Hash:N/A

Other Hashes

Crop Resistant:c931098991b1c999

Scan History

Scan history not available

Unable to load historical scan data