Oh they are legit !
I usually check any prescriptions for the "origin" (just for the fun of it since I know that USA pharmacies just blatantly steal money from patients and insurance) - they are almost never "made in USA" and mostly imported from Canada, India and so forth.
Luckily now USA patients can order meds from Canada but they need doctor's prescription and there is some online forms to fill and once a "customer profile" is established shipping is automatic.
I know because I wanted to try new statin (that is here about 1.500 a month), the only one that does not cross the brain barrier, and it came very fast. It was very affordable, I forgot the amount , like $50 or something like that. But, I changed my mind, I decided not to use statins since as a 62 year old female, with no other cardio risks, there is really no evidence that statin can do anything special in preventing the first cardo event, but that is another story.