A lesson for IoT Makers:

[…]Security researcher Amitay Dan warns that tplinklogin.net, a domain through which TP-LINK router owners can configure their devices, is no longer owned by the company, and that this fact could be misused by malware peddlers.[…]

TP-LINK loses control of two device configuration domains