Skip to content

Ghosted 9.0.0

Latest

Choose a tag to compare

@Splinters-io Splinters-io released this 08 Nov 11:09

Ghosted now reads every source the Ghosteds webapp reads, without the reporting:

  • CSP headers and meta CSP
  • HTML references, inline scripts, styles, import maps and JSON
  • CSS url(), @import and image-set() in every stylesheet the page loads
  • JavaScript module imports and URL strings in every script the page loads
  • Redirects
  • SPF include, redirect, a, mx, exists and ptr terms, and DMARC rua/ruf addresses
  • HAR files, for lazy loads and signed-in pages

Availability is DNS first: a domain with its own nameservers is registered. Everything else goes to AWS Route 53, one call every 4 seconds. Only a registrar answer of AVAILABLE is reported as buyable. Suffixes AWS can't sell are listed for a manual check.

See Getting started. The binaries are built with Go 1.27, CGO_ENABLED=0, from commit b2f7b17. Check them against SHA256SUMS. The macOS binaries aren't notarised.