Hehe, I am lucky I did not get into MEW that day, I was not caught into the thing. Normally I pay attention to my web certificate, plus I use a Json file, I will not put the private key into that website. That's the only thing I do not like about steemit, how many times you need to use your passwords.