I noticed this today for the first time via Little Snitch.
Please see the following links. It is the rich icons for login previews etc
https://discussions.agilebits.com/discussion/29048/little-snitch-and-1password-connections-to-cloudfront : Another topic
https://learn2.agilebits.com/1Password4/Security/privacy.html : Help Document
@thightower Thanks for the response. I was aware that it contacted cloudfront for this information, but static.fmpub.net does not appear to be related to cloudfront from what I can tell. This is what is causing me concern.
Sorry for the confusion. It appears to be a DNS CNAME that eventually resolves to an IP address managed by CacheFly, which is another content delivery network we use.
$ host static.fmpub.net static.fmpub.net is an alias for fmpub.cachefly.net. fmpub.cachefly.net is an alias for vip1.g.cachefly.net. vip1.g.cachefly.net has address 18.104.22.168
This support article has details:
Please let us know if you have any other questions. We're always happy to help!