FAQ says to sign into "IDNotify" you use an email link. Is that a joke? Fake "urgent" emails with links is *exactly* how ID theft happens. What is the legitimate URL?

I get an "urgent" sounding email supposedly from Intuit about some IDNotify finding on the "dark web", with a link to sign in to some mystery site (NOT the intuit.com domain). Guess what? The 100% WRONG thing to do to protect your identity is to sign in using that convenient email link. That's exactly how you get your identity stolen. 

You're supposed to go to the website using a known URL and sign in normally. But when I do that, no link for "IDNotify" at all. Someone please tell me I missed something obvious and there's a safe way to sign in to this thing. Otherwise I've no idea how to validate whether this email is even legitimate. If I were running this operation I'd be embarassed - basic security 101 failure!