incrpcupdate[.]org

incrpcupdate.org is currently flagged as a high-risk domain involved in brand impersonation, specifically targeting the 1inch brand. The domain was registered through NameCheap, Inc. on February 21, 2026, and is actively hosted in the United States under the ASN22612, which is associated with Namecheap, Inc. The website's page title, 'RPC Browser - Loading...', suggests it may be impersonating a legitimate 1inch service, likely related to their RPC (Remote Procedure Call) functionality. This domain is identified as a scam, specifically a wallet/seed phishing campaign, which poses a significant threat to users who may inadvertently provide sensitive information such as private keys or seed phrases. Google Safe Browsing has flagged the site for social engineering, and it is blocked by notable security platforms including PhishDestroy, Polkadot, Enkrypt, and Codeesura.

The domain resolves to the IP address 68.65.120.165 and is served by LiteSpeed technology. The SSL certificate is issued by Sectigo Limited, indicating a secure connection, but this does not guarantee the legitimacy of the site's content. The Gridinsoft trust score for this domain is 0 out of 100, reflecting a complete lack of trust. The HTTP status code 200 confirms that the site is operational and accessible.

Given the high number of security vendors (15 out of 93) that have flagged this domain, and its appearance on four security blocklists, defenders should treat incrpcupdate.org with extreme caution. Any traffic to this domain should be closely monitored, and users should be educated to avoid it. Additional analysis and monitoring are recommended to track any changes in the domain’s behavior or infrastructure.