How to verify legitimacy of online business...

[Michael Cucka]

>From the files of "if it seems to be too good to be true, it probably is"...

I received an email tonite from a "e-tailer" informing me that my email
address was selected at random and I won an iBook - here's the email with
header:

> Status:  U
> Return-Path: <info at dilelectronics.com>
> Received: from fvjyb.com ([65.49.21.115])
> by kite (EarthLink SMTP Server) with SMTP id 1ahdyS3KQ3NZFkD0
> for <XXX at earthlink.com>; Tue, 4 Nov 2003 18:38:21 -0800 (PST)
> To: <XXX at earthlink.com>
> From: "DiL" <info at dilelectronics.com>
> Subject: You've won an Apple iBook (This is not spam)
> Content-Type: text/html
> Message-Id: <200311041838.1ahdyS3KQ3NZFkD0 at kite>
> Date: Tue, 4 Nov 2003 18:38:21 -0800 (PST)
>
> Greetings,
> 
> As part of our grand opening promotion of www.DiLelectronics.com, we are
> running a
> prizedraw. Your email address was selected from an email marketing list,
> and you have actually won an amazing Apple iBook notebook computer!
> 
> Your iBook features:
> 
> •800MHz PowerPC G4 Processor
> •12-inch TFT Display with 1024x768 resolution
> •256MB RAM
> •30GB hard drive
> •CD Writer/DVD Drive
> •ATI Mobility Radeon 9200 with 32MB video memory
> •Apples latest OS X 10.3 "Panther" operating system
> 
> 
> Also, at our online store you will receive a lifetime V.I.P. membership.
> This includes a 15% discount on any product that we have for sale!
> 
> To claim your prize, you may now visit our website and enter in your
> details. Please note that this prize is only available to people aged
> 18 years or over! If you are under 18 you must let an adult claim your
> prize for you.
> 
> We have provided the following web link for you, it is temporary and
> expires in 72 hours. If you do not visit within this time, your prize
> shall unfortunately be returned to the prize pool.

You are given a web link and enter a code that takes you to a page where you
are asked your shipping information - it's a "https" page, but Safari
informed me it couldn't verify the identity of the certificate.

The scary part is that they ask you to pay for shipping - but inform you
that they are unable to process credit cards and request your debit card and
PIN!

There is no direct contact information on the site except a webform to
submit inquiries - they seem to be based in the UK.

Doesn't seem legit to me - what suggestions do you have to verify these guys
in case they are?

Thanks!

Michael