I almost sent myself away just now... When copying the address, I accidentally clicked on a "claim page" that looked exactly the same. Luckily, I’m used to checking the domain name first before looking at the signature content; otherwise, that kind of "authorize all assets/indefinite" signature would be truly gone once confirmed. I now treat mnemonic phrases as a red line: anyone who asks for them gets blocked, customer service can’t help, and airdrops won’t either. Also, about authorization—don’t find it troublesome; after signing, revoke the permissions, especially those you don’t understand what they’re doing. Recently, there’s been a lot of fuss about NFT royalties and liquidity—anyway, the arguments are ongoing, but phishing sites don’t care if you’re a creator or a buyer; they’ll exploit you just the same... I’ve been rug-pulled several times and truly prefer to miss out than keep paying tuition.