I asked a no-face friend model.
She never showed her face on stream, even in private in years of modeling, and never had this pop-up.
Though it definitively seems coming from CB, not a malware.
When accessing to the page you've got this confirming the aim of the url, when not being asked to come there:
View attachment 85893