TP-Link Forgets to Renew Domain, Leaves Routers Open to Hijack

Advertisement
By Akhil Arora | Updated: 8 July 2016 15:04 IST
Highlights
  • tplinklogin.net and tplinkextender.net are the two domains
  • New owner is reportedly asking for $2.5 million
  • TP-Link says the two domains have not been used since 2014

If you've ever configured a network router, you might have come across a domain on the back of your device or in the manual that helps you quickly set the thing up, instead of having to search for the IP address. With TP-Link, it used to be tplinklogin.net. At least on some of its older devices, until the company forgot to renew its license for the same.

That's not the only domain name affected by TP-Link's oversight, though. While tplinklogin.net was used on routers sold until 2014, tplinkextender.net was used by wireless range extenders made by the company. Now, both the domains are not owned by TP-Link anymore, and have been registered by someone else, who's reportedly asking for $2.5 million (roughly Rs. 16.8 crores) to return control for one of the domains.

Advertisement

The reason this could result in a problem is down to how redirection works. When you're initially setting up your TP-Link router, it's still offline and hence typing in tplinklogin.net will send you to the proper local IP address, which in most cases is either 192.168.1.1 or 10.0.0.1. But once you're connected to the Internet, your browser will use the system DNS server to resolve the IP address for the website, which will now point to the squatter's website.

Anyone who owns these domains could use them for phishing purposes - be it to get router credentials from people or even use it to upload a modded firmware onto your router. So you would think TP-Link would do its best to buy back the domains, but it has chosen not to in light of the asking price, according to a Twitter user.

Instead, the company is changing the online documentation on its websites and asking users to use tplinkwifi.net for routers and tplinkrepeater.net for extenders. To go with that, TP-Link has also issued a statement to Slashgear: "TP-LINK has not been using the domain tplinklogin.net- and this domain has not been used since 2014. Any products purchased at that time using the old domain will be automatically redirected to the internal set-up page, so there will not be any security issues."

But it seems the process is still underway. At the time of writing, one TP-Link FAQs page was still using the old domain - tplinklogin.net.

 

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Advertisement

Related Stories

Popular Mobile Brands
  1. Redmi K100 Will Launch on This Date: See Design, New Colourway
  1. Cysic Shuts Down Bridge After Attacker Illegally Creates 10 Million CYS Tokens
  2. JPM Coin Arrives on Ethereum as JPMorgan Expands Institutional Payments
  3. Vivo V80 FE Reportedly Spotted on BIS Certification Website, India Launch Seems Imminent
  4. Airtel’s New Recharges in India Announced: Rs. 185, Rs. 203 and Rs. 206 Voice-Only Plans Details
  5. Vivo X500 Ultra Leak Reveals Launch Timeline, Chipset, Display and Key Specifications
  6. iQOO Neo 12 Launch Date Announced; Design, Colour Options Teased
  7. Qubic Halts Chain as Attacker Exploits Weak Seeds to Drain 1,400 Wallets
  8. iPhone Duo Battery Capacity Revealed Days Before Foldable Goes on Sale
  9. Poco X8s Gets Listed on Another Certification Website, Hinting at Imminent Launch
  10. Redmi Pad 3 Spotted on Multiple Certification Sites Ahead of Launch; Key Specifications Revealed
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2026. All rights reserved.