ibenick
Active member
Out of the blue today, our site has started requesting login credentials through a non-Xenforo login screen on every page load. XF is up to date and patched. The prompt indicates it is for a subdomain that has nothing to do with the subdomain that XF is installed on. It pops up from the top of the browser in the same way that page protected by something like an htaccess file would behave. It doesn't accept any user credentials and the only way to make it go away is to click cancel, but then it happens again on every page load. I've run malware scanners and it appears clean. Any ideas?
Last edited: