Uh..

I went to login to Steamgifts a few hours ago, same computer, same browser. I got a message that said "It appears you've logged in with a new browser." etc. Only..it didn't tell me it was sending me a code to my email, as usual. It asked for my ssfn..now, I probably shouldn't have supplied it. But I always thought Steam Gifts servers were secure. Few minutes later, I got an email regarding my account, saying my email had been changed. I discarded this email, and just played it off (also dumb mistake), until I realized my password no longer worked. I've contacted Steam support, but is SteamGifts asking for your ssfn normal? This just doesn't seem like a coincidence to me.