It looks like you did purchase a legitimate booster box. To address each of your points:
1. Those pulls look about average for a given booster box. About 8 or so Ultra Rares total, 1-2 being Full Arts, and a Secret Rare.
2. You should always expect to see the 2 different types of Code...