{"id":4124,"date":"2016-07-09T10:01:48","date_gmt":"2016-07-09T04:31:48","guid":{"rendered":"https:\/\/www.qadit.com\/blog\/?p=4124"},"modified":"2016-07-09T10:01:48","modified_gmt":"2016-07-09T04:31:48","slug":"oops-tp-link-forgets-to-renew-and-loses-its-domains-used-to-configure-router-settings","status":"publish","type":"post","link":"https:\/\/qadit.com\/blog\/oops-tp-link-forgets-to-renew-and-loses-its-domains-used-to-configure-router-settings\/","title":{"rendered":"Oops! TP-Link forgets to Renew and Loses its Domains Used to Configure Router Settings"},"content":{"rendered":"<p><img decoding=\"async\" title=\"Oops! TP-Link forgets to Renew and Loses its Domains Used to Configure Router Settings\" src=\"https:\/\/ift.tt\/29ivdIP\"><\/p>\n<div>\n<div dir=\"ltr\">\n<p>\nTo make the configuration of routers easier, hardware vendors instruct users to browse to a domain name rather than numeric IP addresses.\n<\/p>\n<p>\nNetworking equipment vendor TP-LINK uses either <\/p>\n<p><b>tplinklogin.net <\/b><\/p>\n<p>or <\/p>\n<p><b>tplinkextender.net<\/b><\/p>\n<p> for its routers configuration. Although users can also access their router administration panel through local IP address (i.e. 192.168.1.1).\n<\/p>\n<p>\nThe first domain offered by the company is used to configure TP-LINK routers and the second is used for TP-LINK Wi-Fi extenders.\n<\/p>\n<h3>\nHere&#8217;s the Blunder:<\/h3>\n<p>\nTP-Link has reportedly &quot;<\/p>\n<p><b>forgotten<\/b><\/p>\n<p>&quot; to renew both domains that are used to configure its routers and access administrative panels of its devices.\n<\/p>\n<p>\nBoth domains have now been re-registered using an anonymous registration service by an unknown entity and are being offered for sale online at <\/p>\n<p><b>US$2.5 Million<\/b><\/p>\n<p> each.\n<\/p>\n<p>\nThis latest TP-Link oversight, which was first <\/p>\n<p><a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/twitter.com\/popshark1\/status\/748863268932943872?ref_src=twsrc%5Etfw\">spotted<\/a><\/p>\n<p> by Cybermoon CEO Amitay Dan, could lead its users to potential problems.\n<\/p>\n<p>\nHowever, it seems like TP-Link is not at all interested in buying back those domains, as Dan <\/p>\n<p><a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/ift.tt\/297NrAi\">claims<\/a><\/p>\n<p>\u00a0that the hardware vendor is updating its manuals to remove the domain name references altogether.\n<\/p>\n<p>\nIn recent years, the hardware vendor has started replacing its tplinklogin.net domain with tplinkwifi.net domain, which is currently under its control. So, there is no direct threat to TP-Link users.\n<\/p>\n<p>\nBut unfortunately, the tplinklogin.net and tplinkextender.net usually came printed on the back of the devices. So, users accessing this domain on devices could end up on a domain under a third-party&#8217;s control.\n<\/p>\n<p>\nIf malicious actors get their hands on these domains, they could use them to distribute malware, serve phishing pages instructing users to &quot;download new firmware to your router,&quot; and request device or social media credentials from users before redirecting them to the router&#8217;s local admin panel IP.\n<\/p>\n<h4>\n<b>The bottom line:<\/b><\/h4>\n<p>\nUsers are advised to avoid accessing their TP-Link routers using the tplinklogin.net domain; instead, use local IP address. <\/p>\n<p>\nDan has also recommended Internet Service Providers (ISPs) to block the affected domain names in order to prevent its customers from being hijacked.<\/p>\n<\/div>\n<\/div>\n<p>via https:\/\/ift.tt\/29wYeod<\/p>\n","protected":false},"excerpt":{"rendered":"<p>To make the configuration of routers easier, hardware vendors instruct users to browse to a domain name rather than numeric IP addresses. Networking equipment vendor TP-LINK uses either tplinklogin.net or tplinkextender.net for its routers configuration. Although users can also access their router administration panel through local IP address (i.e. 192.168.1.1). The first domain offered by &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/qadit.com\/blog\/oops-tp-link-forgets-to-renew-and-loses-its-domains-used-to-configure-router-settings\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Oops! TP-Link forgets to Renew and Loses its Domains Used to Configure Router Settings&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[12],"tags":[],"class_list":["post-4124","post","type-post","status-publish","format-standard","hentry","category-itsec"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9AH7Q-14w","_links":{"self":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts\/4124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/comments?post=4124"}],"version-history":[{"count":1,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts\/4124\/revisions"}],"predecessor-version":[{"id":4125,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts\/4124\/revisions\/4125"}],"wp:attachment":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/media?parent=4124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/categories?post=4124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/tags?post=4124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}