security: config URL links to rogue site (defacement? DNS poisoning?)
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi,
label reports http://tplinkrepeater.net/ as special config URL. But such domain looks taken over / defaced, such that if your device hops on the original SSID instead of the extender's - or if you just visit that URL from any other internet connection - you get a pseudo-config page which at option 3 says (here the excerpt from the Italian version):
"
Soluzione 3
Scollega ogni connessione dal dispositivo che utilizzi per la configurazione.
Attendi 30 secondi collega il tuo dispositivo alla rete Wi-Fi TP-LINK_Ext .
Apri la pagina di configurazione all'indirizzo http://www.tplinkrepeater.net (o http://www(dot)tplinkextender(dot)net), nome utente e password sono: admin .
Esegui la configurazione assistita seguendo le indicazioni a schermo.
"
where the 1st URL is just that of the page but the 2nd URL suggested takes you to a rogue/phishing site of the type click-to-win - nothing you'd expect for the config page of your range extender.
