I agree with Mark. The fact that they are not requesting any information at all leads me to think that it might be legit. However, the first time they asked for any personal information at all I'd run for all I was worth.