Whenever I get something like this that may be questionable, I always go to the site manually rather than using any links provided, exactly how you did. Kind of like the old rule with telemarketers, which is not to give out any personal information unless you are the one that initiated the call.