We've known people to be burned by these sites. No matter how obvious a scam entering your email username and password may seem like, there will be people who fall for it. When a site looks like the one you trust it's sometimes easy to be fooled. That said, always check the URL before putting in your steam information. This goes for logging into Steam, signing into your bank accounts, email websites, whatever.
Here's the latest one making the front page on Reddit.