Dreda.org registration lapsed, and has been picked up by a bad actor.

[MrJoy]

It appears that in 2021 this domain was registered after having lapsed. Currently, duff.dreda.org seems to direct to malvertising of some sort. ("Your computer is infected with a virus!" type stuff.)

[elmindreda]

Thank you! I forgot to update things here when it expired.

I changed the target URL above too so people won't accidentally end up in a bad place while this gets fully fixed.

[sodul]

I filed a security report with homebrew because the home for duff is getting the bad redirects.

> brew home -v duff
Opening homepage for Formula duff
/usr/bin/open https://duff.sourceforge.net/

@elmindreda if you still have control over https://sourceforge.net/projects/duff/ you might want to update it so that https://duff.sourceforge.net/ and https://duff.sourceforge.io/ will not redirect to the malicious domain.