Something similar to this happened to me but I think it was for CSGO. The steam sign in page was a fake popup window inside the main website, draggable and all. I realized it was fake when I noticed it was light theme while my computer was dark theme.

Edit: I realized it was fake before I signed in, luckily