fullstorydev / fullstorydev/grpcurl
Untrusted impersonation of the project at grpcurl.com
- Dominant language
- Go
- Stars
- 12.8k
- Forks
- 580
- Avg merge
- 1h 8m
- Merged PRs (30d)
- 5
Description
## ⚠️ Warning: This project is being impersonated
An untrusted website at **[grpcurl.com](https://grpcurl.com)** is impersonating this project. The site poses as an official resource. While it currently links to GitHub for downloads, **the site operator can replace these links with malicious files at any moment** without warning.
### What the site does
- Copies the project name, description, and branding to appear legitimate
- Currently links to GitHub downloads, but these links are **under the site operator's control and can be swapped out at any time**
- May collect user data or serve tampered downloads in the future
### How this was discovered
This domain was found as part of a broader investigation into a network of impersonation sites targeting open-source projects. Many of these sites share the same infrastructure and template.
### Recommended actions
For steps on how to report this site and request a DMCA takedown, see:
**https://gist.github.com/zerobitflux/57f3791086e18481030df9c204b323fe**
---
*This issue was created to alert maintainers. If you believe this was filed in error, please close it with a comment.*
Contributor guide
No contributing guide indexed for this repository
Research direction
Review the impersonation report and the linked takedown guidance first; no repository file, entry point, or test is identified. Done would mean maintainers assess and report the untrusted domain, rather than making a code change.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100