How exactly do you know it is legit? Because "everyone" got it (though I don't remember getting it)? Someone could have got hold of the MP list of names and e-mail addresses.

It may well be legit. However, I don't remember any promos that had an e-mail as a reply to form. Most link to a page on Mileage Plus or United.com. I'd call and confirm if interested.