Yeah, accountonline.com is totally a Citi official domain. No scam. It's also the domain used in some cases for online access to your Citi account.
I think I've gotten the Citi AA Amex app as well, not 100% sure, but pretty sure one came through my mail sometime in the last couple weeks. Dunno the bonus. I thought I may have still had it around, but I can't find it.
Also if you look here, you'll see all the Citi rewards cards, including, yes, the AA Amex:
http://www.citicards.com/cards/wv/fi...tuent=CONSUMER (Hopefully that link is not session-based and continues to work.) The web signup offers 15k AA miles after $250 in purchases.