I have always checked the MEW website name before entering the key. I stored the key google keep always copy the key & paste it into MEW. The thing I don't understand is how did they get the key from google keep. It is my fault to not to have metamask & hardware wallet. I thought I would get small airdrop amounts so nobody would care about those tokens since those do not have much value.