It's legit. noreply@mojang.com is where system emails are sent from. account.mojang.com/ is the account site. ^DS