The people running these types of services are essentially middle men pirates. To sell them significantly cheaper than what they would be officially they're either stolen, generated, non-retail (OEM, MSDN) or acquired by other illicit means. You might get lucky and nothing will happen but then you might not and it'll get blacklisted.