The 1Password Alert That Told You to Ignore It

**Executive summary:** A targeted spearphishing email impersonating 1Password bypassed authentication checks and URL scanners to host a credential-harvesting page on redi-036602.com that attempted to capture a password-manager master credential; the email used exact display-name impersonation, per-recipient tokens to prefill addresses, and legitimate brand assets, but was reported by the recipient and quarantined—IOCs and defensive recommendations are provided.