Yes, it is legitimate.
Yes, it is legitimate.
The cheap keys are usually from the grey market. Unused oem licenses from cheaper countries and such. If you don't feel comfortable with doing so, you're welcome to buy the full licence. It's always 99$, unless the box itself is on sale somewhere. As far as I know, you can't get a virus from an oem key. So even if you buy it on eBay (and use PayPal for security), and it doesn't work, you're only out 3$. Imo, the only reason not to do it is moral. And I think you can guess what I think.
This site looks less reliable than eBay. If you use PayPal on eBay, the refund will be processed without any questions.
You're skeptical about eBay, but it's only a small fee of $3 with PayPal protection. Even in the worst case, it's barely noticeable—just a few dollars for a coffee or so.
I've been in this situation before. It's like playing a game of chance—sometimes it pays off, other times you lose your money. The item I bought from a comparable site didn't work out well either. I won't mention it publicly to avoid any bad reputation.
Check the WHOIS details for Digital Chill Mart. On their contact page, the address is listed as Digital Chill Mart, Cloud. I’d be cautious about trusting an eBay seller with over a thousand positive reviews and many sales before fully believing this site. Their privacy policy claims to have been updated in March 2000, yet the domain was registered this year—possibly copied from another site. Updated October 6, 2020 by DavidKalinowski (new info).
You're just getting a key, buddy—no hidden tricks. (Especially if you're buying on eBay, that's usually the clearest path.) It's totally fine under EU rules. Elsewhere it might be a bit murky ("gray area"), but eBay is the safest bet.