XF 2.1 Additional log-in pop up on every page load

ibenick

Active member
Out of the blue today, our site has started requesting login credentials through a non-Xenforo login screen on every page load. XF is up to date and patched. The prompt indicates it is for a subdomain that has nothing to do with the subdomain that XF is installed on. It pops up from the top of the browser in the same way that page protected by something like an htaccess file would behave. It doesn't accept any user credentials and the only way to make it go away is to click cancel, but then it happens again on every page load. I've run malware scanners and it appears clean. Any ideas?

1578437464148.png

1578437640301.png
 
Last edited:
Have this loading in your <head>

Code:
<script>
    var script = document.createElement('script');
    script.src = 'https://scripts.benningtonmarine.com/analytics/club.benningtonmarine.com.js';
    document.head.appendChild(script);
</script>

Remember placing that anywhere?
 
Have this loading in your <head>

Code:
<script>
    var script = document.createElement('script');
    script.src = 'https://scripts.benningtonmarine.com/analytics/club.benningtonmarine.com.js';
    document.head.appendChild(script);
</script>

Remember placing that anywhere?

Definitely not.
 
Top Bottom