Repository navigation
Ghosted now reads every source the Ghosteds webapp reads, without the reporting:
- CSP headers and meta CSP
- HTML references, inline scripts, styles, import maps and JSON
- CSS
url(),@importandimage-set()in every stylesheet the page loads - JavaScript module imports and URL strings in every script the page loads
- Redirects
- SPF
include,redirect,a,mx,existsandptrterms, and DMARCrua/rufaddresses - HAR files, for lazy loads and signed-in pages
Availability is DNS first: a domain with its own nameservers is registered. Everything else goes to AWS Route 53, one call every 4 seconds. Only a registrar answer of AVAILABLE is reported as buyable. Suffixes AWS can't sell are listed for a manual check.
See Getting started. The binaries are built with Go 1.27, CGO_ENABLED=0, from commit b2f7b17. Check them against SHA256SUMS. The macOS binaries aren't notarised.