Yes, they can make the link look like anything they want, in the message, but where it actually goes is something else.

Short version.

Never respond to these alerts and if you have the time, forward them to the REAL website so they can investigate.