fullstorydev / fullstorydev/grpcurl

Untrusted impersonation of the project at grpcurl.com

Open
#561 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
12.8k
Forks
580
Avg merge
1h 8m
Merged PRs (30d)
5

Description

## ⚠️ Warning: This project is being impersonated

An untrusted website at **[grpcurl.com](https://grpcurl.com)** is impersonating this project. The site poses as an official resource. While it currently links to GitHub for downloads, **the site operator can replace these links with malicious files at any moment** without warning.

### What the site does

- Copies the project name, description, and branding to appear legitimate
- Currently links to GitHub downloads, but these links are **under the site operator's control and can be swapped out at any time**
- May collect user data or serve tampered downloads in the future

### How this was discovered

This domain was found as part of a broader investigation into a network of impersonation sites targeting open-source projects. Many of these sites share the same infrastructure and template.

### Recommended actions

For steps on how to report this site and request a DMCA takedown, see:
**https://gist.github.com/zerobitflux/57f3791086e18481030df9c204b323fe**

---

*This issue was created to alert maintainers. If you believe this was filed in error, please close it with a comment.*

Contributor guide

No contributing guide indexed for this repository

Research direction

Review the impersonation report and the linked takedown guidance first; no repository file, entry point, or test is identified. Done would mean maintainers assess and report the untrusted domain, rather than making a code change.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.