Thank you for resolving this and warning others! Phishing scams are something we do not take lightly here! You are doing your job to alert others and learn not to fall for them going forward. The best thing you can do is EVERY time you are asked for your key, look at the URL and ensure it is https://steemit.com (or a site you trust AND ensure VALID https/SSL certificates)! If it is not, you have an issue and should back out and report it like you did here!