The phishing links redirect you to a website that looks like SteemIt, but has a different URL. I got tricked because I didn’t take a closer look at the URL, which said steemil[dot]com.
You also have the ones that have an ‘s cedilla’ instead of the first ‘s’.
In short, before tou enter your credentials, you always have to TRIPLE check the URL to make sure you are really on https://steemit.com or https://steemconnect.com.