com-authorization-v3[.]digital

This domain, com-authorization-v3.digital, is designed to deceive users into disclosing sensitive cryptocurrency wallet credentials. The site presents itself as a legitimate authorization portal, often targeting users of decentralized finance platforms. Once credentials such as private keys or recovery phrases are entered, attackers gain full control over the victim’s digital assets, enabling unauthorized transactions and irreversible theft. Analysis indicates this domain was registered on June 04, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It is currently flagged by 9 out of 95 security vendors on VirusTotal, and appears on four distinct security blocklists. The domain resolved to the IP address 104.21.72.208 and used an SSL certificate issued by Google Trust Services, a common tactic to appear legitimate. Multiple threat intelligence platforms, including two pulses on AlienVault OTX, have documented its malicious activity. If you visited com-authorization-v3.digital or entered any credentials, immediately revoke access to all connected applications and transfer assets to a new, secure wallet. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to your wallet provider and consider filing a report with relevant cybersecurity organizations to aid in tracking the infrastructure. Do not reuse passwords or recovery phrases from compromised accounts.