Why worry? A quick view of the address shows that it is indeed LEGO. And LEGO owns BL so they already know who you are. I'd say that this is about as safe as it gets (unless you send them some non-LEGO bricks.) I wished that they would order from me. I would offer to hand-deliver, from Alabama.
LEGO officially goes by bright bluish green whereas Bricklink has it as dark turquoise. Additionally, Bricklink would have the other spaceman as pearl gold I believe.