Even the domain https://block.xyz seemed questionable when I first saw this post.