Popup - Buy & Sell TF2 Items
A WhoIs lookup reveals that the domain was registered via NameCheap on May 18, 2021 (updated May 23, 2021) - Whois tf2.zone
Associated Steam Account (likely compromised) - Steam Community :: Look its a gnomeey
Popup includes a fake pop-up window for users to “log into” their Steam accounts.