I don't think these sites are totally legal to be honest, there are a few around if you look. I'm not sure how they get thier steam keys, but I have heard that if steam find you have bought a key from one of these sites they can confiscate and close your account. So be careful would be my advice. Research it on the internet there is lots of info on these sites.