For anyone who stumbles upon this instance or others, you did the correct thing. You should be skeptical because I immediately thought it was a scam from your description. Going to your known website, and not following and links or calling numbers sent to you unsolicitedly is the most secure move. Only thing would’ve been to call them directly from a number you can verify. Nicely done.