Dreda.org registration lapsed, and has been picked up by a bad actor.
It appears that in 2021 this domain was registered after having lapsed. Currently, duff.dreda.org seems to direct to malvertising of some sort. ("Your computer is infected with a virus!" type stuff.)
Thank you! I forgot to update things here when it expired.
I changed the target URL above too so people won't accidentally end up in a bad place while this gets fully fixed.
I filed a security report with homebrew because the home for duff is getting the bad redirects.
> brew home -v duff
Opening homepage for Formula duff
/usr/bin/open https://duff.sourceforge.net/
@elmindreda if you still have control over https://sourceforge.net/projects/duff/ you might want to update it so that https://duff.sourceforge.net/ and https://duff.sourceforge.io/ will not redirect to the malicious domain.