That URL is acting as a proxy for any external content. Since that content requires a username and password, the username and password must be stored with the item to give you uninterrupted access to the item so an item is created that stores the credentials. The resulting URL is expected but again, is simply a proxy to the actual content. The workflow is similar to the one described below:
Connect to secure services—Portal for ArcGIS | ArcGIS Enterprise