Phishing Phone Number

Yes, if a legit service had sent you an OTP, it would have come from them, not from a spam number.  Phone number can be spoofed, though, but is not applicable in your case.

Most likely good for you then.  You just need to train yourself to be phishing/scam resistant; we all do.  See how Cory Doctorow got scammed by a phone call: https://doctorow.medium.com/how-i-got-scammed-0ae9bd453490 

The fact that you received this weird SMS, it was just a SPAM over the phone.  The sender usually don't know who receive the SMS.

But afterward, you replied to the SMS by going to a website designed by the criminals.  They know your computer OS, thus its weaknesses.  They know where you are from your IP address.  They also know your phone number.  Their website could have sent code to install malware on your computer if it's not up to date.  They could have a database of hacked websites and try to crack accounts tied to your phone number.  They could also try SIM Swapping if they think they can make a huge gain.

All account tied to your phone number are at risk.  You should change the password of all websites tied to your phone number.  I also agree with the recommendation that you should be more careful in the future.

You say an old debit card, if this is still on an active account then tell the bank or institution that issued the card.

An "active" account is any account you have not closed in a formal communication with the provider of the card.