New sign-in to Steam emails

You can see where that email actually comes from by checking headers I think.

Edit: I checked a couple emails from Steam. They're from:

smtp-60.steampowered.com
smtp-61.steampowered.com
smtp-04-tuk1.steampowered.com
smtp-53.steampowered.com

or something like these.

enable 2FA ?

Where does the "reset your Steam password now" link go to (from the first image)? I hope you didn't use that link to reset the password.

I've received no email from Steam Team for a decade. Though the email looks authentic, your best option is still the same.
Change your password, get 2FA if possible, and you can also ask Steam Support to aid you securing account. You may also ask the authenticity to the support.

If you were using Gmail, there should be a check mark for Steam verified . Sadly, I don't think you are.

I see between the o and w letter in email address something. I guess the email is a phishing attempt. If you place the mouse over the link to enable 2FA surely redirects to another website. I remember one time I got an email from gmaíl.com domain. Do you see the difference to gmail.com?

You already got great advice here: Enable 2FA, and don't click on any of the links in the email!

If you want to change anything to your account: manually go to Steam's website, confirm that the website you're on has a legitimate certificate issued to "Valve Corp [US]", login manually, manually go to the change password/enable 2FA pages.

Maybe the scammers have found a way to sent scammy emails from Steam.I remember a site being compromised and hackers sending malicious mails to people.Contact Steam Support.Multiple people might be facing this without Steam knowing about the hacker in their network.

I got the same message 2 days ago from my other account when I used ASF.
I remember getting a lot of messages that someone wanted to login and there was 2FA code, which means someone knew my password. I changed it many times and still got these messages. And then I finally realized that it was my second account registered on the same email, which I completely forgot about 🤦‍♂️

Better is to Change your password and get 2FA if possible.

P.S : Trying to enter into you're GA, and i am on you're Blacklist, could i know why (for curiosity) ?
P.S 2 : I see that you remove the Blacklist, thanks :)

It seems like a false mail to me. Given the formulation of it. Scammers are usually barely literate (we are not talking about Nobel price winners if you get what i mean).

i work in cybersecurity. its not a phishing attempt, it was sent by steam from a domain that steam owns. you can check domains at whois.com to be sure that it is actually owned by Steam. reset your password to something secure that hasn't been used elsewhere. enable 2fa. double check to see that your inventory hasnt been offloaded and contact support to ensure that they force all devices to log out so they don't use an old token. it'll be okay!

Change password and use 2fa .
I got logged once out of steam with the msg ,someone else is logged into my account 1y ago.
After changing pw.
I wrote Support.
they said there was no attempt to login into my account.
It was just a bug.
But always be careful .
Better save than sorry .