It appears that TP Link has forgotten to re-register domains it used for user router logins.
Potentially, a hacker could set up new sites on there and phish for user credentials.
That doesn't appear to be the case right now as the new owner is happy to return the domains for $2.5 million.
[
arstechnica.com...]
Reminder: I must go check my renewals, I must go check my renewals, I must go check my renewals, I must go check my renewals...