Redirected from a real exchange site to a fraudulent site?
If it's a fraud, how could they have sent a fraudulent link through a real binance email address?

It has long been trivial to forge the &quot;from&quot; address in Internet e-mail. You could learn how to do it in about thirty seconds.
See https://en.wikipedia.org/wiki/Email_spoofing

The core email protocols do not have any mechanism for authentication, making it common for spam and phishing emails to use such spoofing to mislead or even prank the recipient about the origin of the message.

The link above goes on to describe countermeasures - but note these are not universally applied.