GhostAlias — MadCrabCyder

GhostAlias generates random-looking but fully reversible email aliases for use with catch-all privacy-focused mail services.

It allows you to:

• Identify which services leak or sell your email
• Prevent predictable alias patterns
• Avoid exposing the original service name
• Maintain full reversibility without storing mappings

The Problem
Many privacy-conscious users rely on catch-all email domains to create deterministic addresses:

• google@yourdomain.com
• amazon@yourdomain.com
• reddit@yourdomain.com

This makes it easy to identify leaks - If you start receiving spam at:

• google@yourdomain.com

You know the source - But there’s a flaw.

These aliases are:

• Predictable
• Easily guessable
• Obvious to attackers
• Identifiable as deterministic

Spammers can brute-force common domain names and generate likely aliases.

The GhostAlias Solution
Instead of:

• google@yourdomain.com

GhostAlias generates:

• im6b5c@yourdomain.com

The alias:

• Looks random
• Uses only safe characters (a-z, 0-9)
• Is deterministic
• Is fully reversible
• Requires no database
• Works entirely offline

Later, you can decode the alias back to:

• google

All encoding and decoding happens locally in your browser.

No data is transmitted anywhere.

Features

• Deterministic alias generation
• Full decode support
• Selectable payload parts (subdomain, domain, TLD, salt)
• Fully offline operation
• Local settings storage only
• Clipboard integration

Privacy

GhostAlias:

• Does NOT collect data
• Does NOT transmit data
• Does NOT use analytics
• Does NOT communicate with external servers

All processing happens locally inside your browser.

Settings are stored using the browser’s local extension storage.