Popup - http://shadowplay.com.mx/items/d391f377-5acb-4101-5789709b8
A WhoIs lookup reveals the domain was registered via NameCheap on June 8, 2021 - Whois shadowplay.com.mx
Associated Steam Account (likely compromised) - Steam Community :: Elijah
Popup is a direct clone of ShadowPay.com, complete with a fake popup window for users to “log into” their Steam Accounts.