all looks legit to me. The email can be traced back to the ticketmaster domain ( which is normal) and the link goes via ticketmaster (again normal) but ends up at the richmond membership website
That's not proof its safe, you can be redirected and domain names can be faked. Javascript can do a bunch of hacks. Don't click the links, its not safe.
This sort of hack is called XSS or cross site scripting. It can be used for all sorts of things, stealing passwords, hijacking users browsers and distributing malware.
