Is square.site legit or a scam?
Official Square website-builder platform; legitimate root domain operated by Block, Inc., though subdomains have been abused by phishers.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
square.site is the legitimate subdomain host for Square's website-builder service, operated by Block, Inc. (NYSE-listed, founded 2009). Our antivirus network shows zero detections, SSL is valid, and the domain has been active for 2,690 days — consistent with a major financial-services platform. The evidence package confirms this is the official promotional page for Square's business tools and merchant websites. While phishing reports exist, they target specific merchant subdomains (yahooh0000.square.site, sso-netcons-eng.square.site) used by attackers to impersonate other services — not the root domain itself. The root page serves as the legitimate entry point for Square's website builder and payment services. No complaints or scam reports target square.site directly.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for square.site, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- square.site is the official domain operated by Square (Block, Inc.) for free merchant websites and online stores; individual sites use subdomains like merchantname.square.site
- The root https://square.site/ serves as the main promotional page for Square's business tools, POS, payments, and website builder
- Square's subdomain service has been heavily abused by phishers: one 2023-2024 report documented 6,162 phishing attacks hosted on square.site subdomains
- Specific phishing examples include yahooh0000.square.site, sso-netcons-eng.square.site, upld-info-web.square.site, and others impersonating services like Yahoo, Uphold, or SSO portals
- Block, Inc. (parent company) is a legitimate, publicly traded US financial technology firm founded in 2009, with positive overall reputation for its payment services despite some merchant complaints on unrelated issues
- Individual merchant sites on *.square.site receive mixed Trustpilot reviews depending on the business; some have excellent ratings, others average or low
- No direct scam reports or complaints targeting the root square.site domain itself; issues are confined to abusive subdomains
- CAIDA Phishing Landscape Reportopen
"square.site | 6,162 phishing attacks created on 671 second-level domains using subdomain service providers"
- PhishDestroyopen
"sso-netcons-eng.square.site as a high-risk generic phishing domain"
- Gridinsoftopen
"Yahooh0000.square.site has a 1/100 trust score and is flagged as Phishing"
- PCRisk Scanneropen
"upld-info-web.square.site ... phishing or fraud-related ... square.site subdomain rather than an apparent official Uphold"
square.site is the official free subdomain service (square.site / *.square.site) provided by Square (Block, Inc.), a publicly traded US company (NYSE: XYZ, formerly SQ) for merchant websites and online stores. Domain age aligns with ~7+ years of service.
Our research found that square.site is the official free website-builder and subdomain host operated by Square (Block, Inc.), a publicly traded US financial-services company. Phishing reports in the evidence package (CAIDA, PhishDestroy, Gridinsoft, PCRisk) document abuse of merchant subdomains by attackers impersonating Yahoo, Uphold, and SSO services — not the root domain itself. Legitimate merchant sites on square.site subdomains receive positive an independent review aggregator reviews. Block, Inc. is a well-established, legitimate business with no direct scam complaints targeting the root square.site domain.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No postal address visible on the page.
- Phone number listed (00000029).
Domain & Encryption
Redirect Chain
- 1302http://square.site/
- 2301https://square.site/
- 3200https://squareup.com/us/encross-domain
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on square.site and not a lookalike like s-quare.site.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on square.site. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- square.site passed our automated security checks with a trust score of 92/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. square.site presents a valid TLSv1.3 certificate issued by Let's Encrypt · E8, expiring in 47 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- square.site is 7.4 years old, registered on 2/5/2019 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report square.site as clean.
- No. square.site is not currently listed on the major browser blocklist feeds that modern browsers use.
- square.site resolves to an IP operated by Weebly, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. square.site sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.