{"success":true,"data":{"id":"fake-wix-squarespace-website-builder-billing-phish","label":"Fake Wix / Squarespace / Weebly website builder subscription billing or site offline phishing — fraudulent email impersonating Wix, Squarespace, or Weebly claiming the recipient's Premium plan payment has failed, their website plan has expired, or their website is now offline — directing them to sign in, update billing, or renew their plan to restore their website — a credential-harvesting and payment card theft attack exploiting the catastrophic urgency of a business website going offline; Wix has 220M+ registered users, 6M+ paid plans; Squarespace 4M+ paid subscribers","description":"Phishing emails impersonating Wix, Squarespace, Weebly, or Webflow claiming the recipient's Premium plan payment has failed, their website plan has expired, or their website is now offline — directing them to sign in, update billing, or renew their plan to restore their site. Key facts: (1) Wix has 220M+ registered users and 6M+ paid Premium plans; Squarespace has 4M+ paid subscribers; for a small business, e-commerce store, or service provider whose website IS their primary business presence, an \"offline\" notification creates extreme, immediate urgency that overrides careful sender verification; (2) The \"your website is now offline\" and \"visitors will see an error page\" variants are particularly effective because they trigger fear of reputation damage and immediate revenue loss — an e-commerce store offline for even a few hours loses orders, and a local business with no website loses appointment bookings and customer calls; (3) Attackers harvest both the Wix/Squarespace account credentials (giving access to the website CMS, all published content, domain settings, and any stored customer data) AND the payment card on file for ongoing subscription charges; they may also redirect the domain to a different server (phishing page, scam page, or competitor redirect) causing lasting SEO and reputation damage; (4) The attack is opportunistic: many small business owners manage their own websites and are not technically sophisticated — they receive real billing notifications from Wix/Squarespace regularly and have been conditioned to click and update when prompted. Warning signs: sender domain not wix.com or squarespace.com; no reference to specific plan name, website URL, or next billing date; link to non-official login page; urgency about website going offline immediately.","tier":"danger","category":"phishing","isThin":false}}