Hey Peter, thanks for the reply.
In fact, I already had set this setting to:
I also tried the other option now, which allows login with all (sub)domains that resolve to the server, but it still happens.
This is the URL in question, rather than showing an error page with login button, it shows...