>>If this URL is malformed (not something.morething.com or xxx.yyy.zzz.qqq but containing a bunch of stuff and then having a @ somewhere in the middle) it's a safe bet that it's not safe. It's scam/spam/sham.
>
>Thank you for your input. So far, everything looks very legit.

One more thing: launch cmd.exe and tracert the url you got. See where it goes. Sometimes you may find your bank in Ukraine, China or France or any other surprisingly strange place ;).