Squarespace domain hijacking used to inject wallet drainers in crypto sites

PSA: if you had domains hosted with Google Domains that were recently transferred to Squarespace automatically, 2FA is not enabled by default in some cases. Double check!