There is no special access between one-of-us.net and nerdster.org. The ONE-OF-US.NET phone app reads the Sign-in Parameters in the QR code, checks if a delegate key for ("domain") is present, and then performs an HTTP POST over the Internet to the address ("url") it was instructed to, optionally end-to-end encrypted using the disposable encryption public key provided ("encryptionPk").
When signing in to a service on the same device as the ONE-OF-US.NET phone app, these 2 are offered:
https://keymeid (a "URL scheme") is registered by the ONE-OF-US.NET phone app. It's
heterogeneous and works reliably on Android; on iPhones, not so much.
https://one-of-us.net is obviously not heterogeneous.
This tech goes by "Universal Links (iOS) & App Links (Android)", and it does work reliably on
iPhones.
The data communcited is the same as what's in the Sign-in Parameters.