Obviously it is not legitimate. Neither DPR nor inigo say "Dude" ... lol ... and they would not be providing you with a stupid privnote. They know how to use PGP. They would also not be sending you a PM to help reduce your vendor bond.