connectmerger[.]xyz

The domain connectmerger.xyz was registered on 2026-02-21 and is currently taken offline. Infrastructure analysis shows that the domain resolves to 78.46.40.242, an address owned by Hetzner Online GmbH (AS24940) located in Germany. The site presented an SSL certificate classified as R12, indicating a low-trust certificate, and received a Gridinsoft trust score of 0 out of 100. Content analysis revealed the page title “Metachaindapps Ecosystems || Standard Blockchain-Based Protocol,” which does not reference the impersonated brand.

However, the domain is explicitly listed as impersonating the cryptocurrency aggregator 1inch, and the overall scam type is identified as a crypto scam. Detection telemetry indicates that 11 of 93 security vendors on VirusTotal flagged the domain as malicious. It is listed on five independent security blocklists and has been blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. The combination of a brand-impersonation label, low trust scores, a weak SSL certificate, and multiple vendor detections confirms a high-risk profile.

Defenders should ensure that 78.46.40.242 is added to network-level deny lists, enforce DNS filtering for connectmerger.xyz, and maintain the existing blocklist entries. Continuous monitoring of the hosting provider Hetzner for any re-use of the IP address is recommended, as well as periodic re-scanning of the domain in case it becomes active again. Given the confirmed impersonation of 1inch and the crypto-scam classification, any traffic attempting to reach this domain should be treated as hostile.