Note that there are sites like this that are "legit" in the sense they just forward your request to the .gov site for an extra fee, and you do get your documents later - I made this mistake with a birth certificate request once on one of these types of sites.
This happened to me. I froze my credit, did a chargeback, and demanded a refund and for them to delete my personal information. Yeah, it’s embarrassing, until you realize what not trusting the government means: everyone’s filter against bad actors gets degraded.