Is merkle.io legit?
This site appears mostly safe, but you should use some caution due to a few notable missing elements. The primary legal pages are incomplete, and the site redirects to a different domain, which can be unsettling.
SaaS average: 81/100 · based on 62 sites
Checked: April 21, 2026 at 8:40 AM UTC
Is merkle.io a scam? Here's what we found.
The security configuration is strong, featuring a valid SSL certificate issued by Google, a modern TLS 1.3 connection, and no detected threats by Google Web Risk, ensuring a secure browsing experience.
With a domain age of almost 7 years and active DNSSEC, the site shows a reasonable level of established presence, although the WHOIS information being privatized prevents full transparency about ownership.
The site holds a very high Tranco rank and is clean on DNS blacklists, indicating a generally good reputation, but the immediate redirect to a different domain is a minor point of concern.
While contact information is present and the site has custom branding, the absence of a Trustpilot profile and social media links on the homepage reduces overall transparency and avenues for public interaction.
The partial completion of legal pages (missing either a privacy policy or terms of service) is a notable compliance weakness that should be addressed to build user trust.
The infrastructure is well-configured with multiple IP addresses, robust email authentication through SPF records, and Cloudflare as a DNS provider, although the sitemap misconfiguration is a minor technical oversight.
Signals Detected
This is one of the most visited websites globally
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 86 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Resolves to: 2606:4700:10::6814:20d1, 2606:4700:10::ac42:9c5c, 104.20.32.209, 172.66.156.92
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., alt4.aspmx.l.google.com., alt3.aspmx.l.google.com.
Domain has SPF email authentication configured
DNS providers: itzel.ns.cloudflare.com., santino.ns.cloudflare.com.
Site has custom branding and social media metadata
Sitemap URL returns non-XML content
robots.txt has 23 directives
Site redirects to https://blinklabs.xyz/
Site enforces HTTPS via HSTS
Web server: Netlify
No threats detected by Google Web Risk
Domain created 2019-08-22T10:12:39Z (6 years, 9 months ago)
Registered through NameCheap, Inc.
Expires in 123 days
DNSSEC status from WHOIS
crt.sh returned status 502
Website is live and responding
Website appears to have contact information
Website is missing either privacy policy or terms of service
No social media links found on homepage
Could not query Wayback Machine
Not found on any DNS blacklists
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.