"Here a youtube video someone made that goes more indepth giving you a view example to help you learn more about these phishing attacks.
https://www.youtube.com/watch?v=WfTXxLraokE

If anyone asks for your login details, report them ASAP, and avoid them as no one should ever be asking for your login details in the 1st place.

If trying to use a site that uses Steam API login, never login via 3rd party site, just head to Steam itself 1st, that means leave the 3rd party site, go to https://steamcommunity.com/ itself, and login on Steam, then revisit 3rd party site, if it shows a one click login like this, then it's using the Steam API login system, and safe, as only thing shared is your Steam profile public ID number.
https://steamcommunity.com/sharedfiles/filedetails/?id=2338543075

If it shows like this for login, then it's a phishing site that trying to scam you into logging into the scam site.
https://steamcommunity.com/sharedfiles/filedetails/?id=2329645315"