If they were trying to steal your account, why would they direct you to the official site?