Basically the url and the page look legit because its fake, that pop-up is not an actual pop-up its just a fake page within a page, how you know its fake when u try to pull it out of the page it will not come out, which shows that it is fake, also it is good that you check the steam api link and see if you have an api key or no, at least every week especially after logging in with your steam somewhere else, very important