Hey folks, maybe add 1password-login[.]com to your blocklists immediately. Newly observed about an hour ago.

Also check out its nameservers and IP pivot: bitwarden-vault[.]org yesterday, fortivpn[.]download recently, a LOT more badness.