block.xyz is the corporate web address for Block, Inc., the publicly traded company behind Square, Cash App, and Afterpay. Given its long domain history of 12 years and clean security record, there's no reason to suspect this is a scam. However, the homepage is stripped-down: you won't find a phone number or an about page there, which is unusual for a financial firm. Most legitimate finance sites make their leadership and contact info easy to find. The privacy policy and terms are present, and the site uses modern security protections. So while block.xyz is clearly tied to a real company, casual visitors may need to click through to subsidiary pages for full transparency. If you're checking whether block.xyz is safe to use for business inquiries or investor relations, the answer is yes — just be aware that the homepage itself offers little hand-holding.
In plain English
block.xyz is a legitimate domain for Block, Inc., the company behind Square and Cash App. Most technical signals are strong, but the homepage is surprisingly light on direct contact information and an about page, which is worth noting for a financial services brand. Overall, it's a safe site to trust, just not perfectly transparent.
Where the score comes from
Strong security setup with a valid SSL certificate, modern encryption, and strict email authentication. No malware or phishing flags detected, which is exactly what you'd expect from a legitimate corporate site.
The domain has been registered for over 12 years and is clearly tied to Block, Inc., a well-known publicly traded company. While the WHOIS uses a privacy service, that's standard for large organizations and doesn't obscure who really owns the site.
The site has a clean bill of health from blacklists and Google Web Risk, a solid web archive history spanning 4 years, and moderate global traffic. Nothing here suggests any reputational risk.
The homepage doesn't list direct contact information or an about page, which is a gap for a financial company. Social media links and legal pages exist, but users have to dig for basic company details.
Privacy policy and terms of service are present, which covers basic legal requirements. There's no dedicated legal entity disclosure, but for a US-based company that's not a hard requirement.
The site is fast, uses a global CDN, has multiple backup name servers, and sets important security headers. DNS security extensions aren't enabled, but that's a minor point given the overall solid setup.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →