TIPS TO AVOID PHISHING OR SCAM SITES!! THIS IS NOT A JOKE
If a certain website can be linked with Steam, Facebook, Gmail, etc. Just login the appropriate original sites. If you want to login via steam, enter your login credentials on steam site, not in third party.

If a certain website asks you to enter your login credentials of other 3rd party sites (ex: steam, fb, etc), NEVER ENTER BOTH YOUR USERNAME AND PASSWORD. If you do it, they will get the login token which will bypass your OTP.

Better to remove or reset the device access of your steam now so that the old login token will be rendered useless!!! I've posted pics of a scammer who was able to get access of my login token and blocked all of my friend list. Luckily, I was able to notice it early on before he was able to rob my items!!