This phishing site cleverly puts its fake Steam sign-in form in an about:blank pop-up to hide its suspicious domain name
Conversation
Replying to
I've seen similar ones that mimic the openid sign in flow, but for some reason they leave the sketchy domain in.
