noncustodialprotocols[.]com

The domain noncustodialprotocols.com is currently flagged as an active cryptocurrency phishing site. Intelligence sources report that the site is listed on the PhishDestroy and ScamSniffer blocklists, and its risk level has been assessed as high. The page title presented to visitors reads “Non Custodial Sync Dapp,” a phrasing commonly used to lure users into exposing private keys or seed phrases.

Infrastructure analysis shows the domain was registered on February 21, 2026 through NameCheap, Inc. and resolves to the IP address 216.198.79.1, which is associated with a U.S. hosting provider identified as Lefkoff Industries. DNS is delegated to Vercel’s authoritative name servers (ns1.vercel-dns.com, ns2.vercel-dns.com). The site is served over HTTPS using a Let’s Encrypt certificate (YR1) and enforces HTTP Strict Transport Security. Detected technologies include Vercel, Smartsupp, Google Tag Manager, and a 307 temporary redirect response, suggesting the page may forward users to additional malicious endpoints.

Security scoring systems assign the domain a Gridinsoft trust score of 0 out of 100, and VirusTotal records indicate that three out of ninety‑five scanning engines have flagged the site for malicious behavior. The presence on two independent blocklists, combined with the low trust score and the use of a cryptocurrency‑focused lure, provides concrete evidence that the domain is being used to harvest credentials or private keys from unsuspecting victims.

Defenders should proactively block DNS resolution for noncustodialprotocols.com and monitor outbound connections to its hosting IP 216.198.79.1. Email gateways should be configured to quarantine messages containing links to the domain, and endpoint protection should flag attempts to load the page or its associated scripts. Continuous threat‑intel feeds must be consulted for any emerging indicators tied to the Vercel infrastructure or the specific redirect chain observed.