The main problem I had was it was Solid sending me the link. Didn't think he'd fall for it, and of course I was not at all expecting to be send links like that at the time.
And I didn't fall for it. I got as far as clicking the link and seeing it was trying to clone the main Steam site to know it was fake. When Solid came back on the second time, the first being going on TF2, probably the person in control stealing his stuff, I quizzed him on the Blockland community, things a random hacker couldn't know off the bat and confirmed he still had access. He's account is simply compromised.