@niko the phishing site is kind of funny.
it pretends to open a new browser window, though the window decorations seem to be windows only.
the qr code login url is just a link to the real steam login page, it doesn't attempt to make that login "work"