The only external Steam-based sites I will personally use are Humble Bundle, Green Man Gaming, and GamersGate (though GG is unfortunately named, based on the social event/group with a very similar name). All are legit, and I've never had issues getting and using Steam keys from any of them.