Don't trust URLs, and don't trust "green locks" and stuff like that.

It's not too difficult to register something that looks like Valve, and because it's technically flawless it will get a "green" by the browser. Yet, my "Valwe Corp" still isn't that same thing as the real Valve. I might even be able to get a "Valve Corp" in some country.

Also, browser have had security issues that allowed websites to display stuff in the address field that didn't really correspond to what was shown as a webpage.

All this may or may not be easy, fixed, still an issue etc. -- but it's all extra work, and it can fool you. Logging into the real Steam on your browser beforehand is trivial (in fact, unless the login has expired for some reason, I never have to do that...), and the real "Login through Steam" will just ask you whether you want to log in with that account. That's trivial, and even IF that website manages to get your Steam login name somehow, how is you clicking "Yes" going to give them anything?

THE WALL OF IDIOTS!!!!!!! (Look out for these idiots)

-Jamtron- from Hijacking russian fed
(76561199017650211)

-Dig- from tf2 rigged gambling site
(76561199670775897)

-Who?- from racist Closted alt cheater
(76561199806116843)