So if you click the link you get phished?
Click it, AND enter your steam credentials.
Something similar happened to me once. It all looked so real, and didn't pester me about free stuff...
At first I was like "what?" Then I clicked the link, saw that steam itself said "THIS IS NOT AN OFFICIAL STEAM PAGE", and then I called the bot stupid and reported it.
Wth is a phish?I never heard of it.