Inspector

What this tool does

The inspector is the front door. Paste one thing and it tells you what that thing is and opens the tool that handles it. Paste a whole log, a config file or a ticket and it lists every identifier it finds, with the line and column where each one sits, so you can jump into the right tool for any of them or send all the MAC addresses to bulk annotation in one click.

What it detects

MAC addresses and EUI-64 identifiers in colon, hyphen, Cisco dotted and bare forms; IPv4 and IPv6 addresses, including zone ids and IPv4-mapped tails; CIDR blocks and IPv4 ranges; domain names and URLs; email addresses; JSON Web Tokens; PEM blocks such as certificates, requests and keys; hex digests of the common lengths (MD5 through SHA-512); UUIDs; Unix and ISO 8601 timestamps; autonomous system numbers; and, when the whole input is nothing else, base64 text.

Overlap rules

Real text is ambiguous, so every candidate is collected first and then the longest span wins. When two candidates cover exactly the same text a fixed priority decides. The consequences are the ones you would want: a MAC-shaped run inside an IPv6 literal is reported as part of the IPv6 address, not as a MAC; a 32 or 40 digit hex string is a digest, never a bare MAC with extra digits; an email address is not also reported as the domain it contains; and a URL swallows its host name. A short all-letter token such as facade is left alone because it is far more often a word than a prefix.

How to read the result

When the input is exactly one identifier you get a card with its kind, its normalised form (a compressed IPv6 address, an upper-case MAC, a UTC timestamp), a one-line explanation and a button to open it in its tool. For a MAC the card also shows the flag verdicts so you can see at a glance whether an address is randomized or multicast without leaving the page. With several identifiers you get a table with a per-kind count. A tool that is still on the roadmap is marked planned; the link still works and will light up when the tool ships.

Privacy

Detection runs in your browser and nothing you paste is sent anywhere. The input is kept in the URL fragment so you can share or bookmark a run; fragments are never sent to a server. Tools that need a vantage point on the internet, such as DNS and HTTP checks, say so on their own pages before they query anything.

Where each kind goes

• MAC and EUI-64 to the MAC inspector; two or more to bulk annotation
• IPv4 and IPv6 to the IP inspector; CIDR and ranges to the subnet calculator
• Domains to DNS lookup; URLs to the HTTP check; email addresses to email authentication
• JWTs to the token decoder; PEM blocks to the certificate decoder; digests to the hash tool
• UUIDs, timestamps, ASNs and base64 to their own utilities

More background on each identifier family is in the guides section.