I'm not a Cort expert, but it seems legit to me. What makes you think otherwise? If it's the part about him changing his PayPal address, that happens sometimes, particularly if your account gets hacked. Ask him a lot of questions and see what type of answers you get, then you can make a better decision whether it's legit or not.