Minas Tirith
v1.13.1
2026-06-09
- Security — API: tighten CORS to same origin. The backend API
(
/api/ipwhois, /api/rdap, /api/rdns, /api/cert,
/api/oui) previously sent Access-Control-Allow-Origin: *, allowing any
third-party site to use Palantiri’s server as a free RDAP/WHOIS proxy. The header is now
restricted to https://palantiri.work.
- Security — API: validate MAC length on
/api/oui.
The OUI endpoint now rejects inputs longer than 32 characters with a 400 error, matching the validation
already present on all other endpoints.
v1.13.0
2026-06-09
- Added — Share link button. Every result now has a
“Share link” button next to Copy all / JSON / CSV. One click copies a permalink to that
exact lookup; whoever opens it lands on the same query, run automatically. Handy for sending a
colleague the precise subnet, domain or ASN you were looking at.
Pelennor
v1.12.0
2026-06-08
- Added — Plain-English summary on every result. Each lookup
now opens with a one-line, human-readable sentence under the headline — how many usable hosts a
subnet has and its address range, what a port is for, who operates an ASN, and so on — so you get
the answer at a glance before scanning the detail grid. The summary is included in “Copy all”
and the JSON / CSV exports.
- Changed — Raw representations tucked into a collapsible section.
Hex, integer, wildcard and fully-expanded forms now sit behind a “show raw representations”
toggle, roughly halving the number of cells shown by default so the essentials stand out. Nothing is lost
— one click reveals them, and exports still include every field.
- Changed — Readability & contrast. Secondary and footnote
text now has stronger contrast for better legibility (especially in light mode), and sub-labels are
slightly larger.
Helm's Deep
v1.11.0
2026-06-08
- Added — Maintenance mode. Palantiri can now be taken
offline for upkeep and brought back instantly, with no downtime to the underlying server. While
maintenance is on, every page shows a friendly “the palantír has gone dark”
notice (HTTP 503) instead of the tool; toggling it on or off takes effect immediately.
It is operated privately by the maintainer — nothing is exposed to visitors beyond the notice.
Rohan
v1.10.1
2026-06-08
- Docs — FAQ guide for the subnet operations. The FAQ now has a
step-by-step walkthrough of the split / range→CIDR / aggregate / compare operations — what each one
does, when to use it, the exact syntax, and what the result shows.
v1.10.0
2026-06-08
- Added — Subnet / CIDR operations. The input box now understands four new IPv4 set operations, all computed locally in your browser:
- Split — 10.0.0.0/22 split 4, 10.0.0.0/22 /24, or 10.0.0.0/24 hosts 50 — divide a block into equal subnets, into a target prefix, or into subnets that each fit a given host count.
- Range → CIDR — 10.0.0.0 - 10.0.3.255 — the minimal set of CIDR blocks covering an address range.
- Aggregate — 10.0.0.0/24, 10.0.1.0/24 — collapse a comma-separated list of blocks into the fewest supernets.
- Compare — 192.168.1.5 in 192.168.0.0/16 — whether one block contains, overlaps, or is disjoint from another.
Results export to JSON/CSV like any other lookup. IPv6 support for these is planned.
Osgiliath
v1.9.1
2026-06-08
- Fixed — DNS propagation check: two resolvers were blank. The Quad9 and OpenDNS columns never returned a result because those resolvers only speak DNS-over-HTTPS in binary wire format, not the JSON API the check uses. They've been replaced with Tiarap and DNS.SB, which expose a JSON API with the right cross-origin headers — so all four propagation columns now populate.
v1.9.0
2026-06-08
- Added — SOA (Start of Authority) record. Domain lookups now include a dedicated SOA box for the zone apex, showing the primary nameserver, hostmaster email (decoded from DNS format), serial number, and the refresh / retry / expire / minimum (negative-cache) timers — each shown in seconds with a human-readable duration.
Amon Sûl
v1.8.0
2026-06-08
- Changed — IP WHOIS now resolves the owning network, not just the most-specific record. When an address falls inside a small customer reassignment, the lookup walks up the registry's allocation hierarchy to the block actually held by the owning ISP / organization, so you see the real operator and its full address range instead of a narrow sub-assignment. The most-specific record is still noted beneath the allocation. Addresses that are already a direct registry allocation are unchanged.
- Fixed — IP registry data now loads reliably. Registry/RDAP lookups for IPs are fetched through the site's own backend instead of directly from the browser, so the network name, allocation, address range, registry and abuse contact populate consistently (the previous direct call was blocked by the page's connection policy).
Orthanc
v1.7.0
2026-06-07
- Security — Self-hosted fonts. The Archivo and JetBrains Mono web fonts are now served from this site instead of Google Fonts. No page asset is fetched from a third party anymore, so visiting Palantiri no longer reveals your IP or visit to Google, and removes a third-party dependency from the page.
- Security — Stricter Content-Security-Policy. All styling moved to external stylesheets, so the policy no longer needs to allow inline styles (style-src 'unsafe-inline' dropped) and no longer trusts the Google Fonts origins. Combined with the earlier removal of inline scripts, the page now loads only same-origin code and styling.
- Security — Control characters stripped from looked-up data. Values returned by third-party sources (DNS, reverse-DNS, WHOIS, vendor names) now have invisible control characters removed before they are shown or exported, preventing malformed or misleading output.
- Changed — Expanded Permissions-Policy. The browser-feature lockdown now also denies access to USB, payment, sensors and similar APIs the tool never uses.
Khazad-dûm
v1.6.1
2026-06-07
- Security — Hardened HTML escaping against attribute injection. The internal escaper now also encodes quotes and >, not just & and <. Some third-party values (reverse-DNS / PTR hostnames, DNS record data) are placed inside HTML attributes; without quote-encoding, a maliciously crafted value could have broken out of the attribute. The page's Content-Security-Policy already blocked script execution from such injection, so this closes the gap at the source as defense-in-depth. No change to displayed results.
v1.6.0
2026-06-07
- Added — Export results as JSON or CSV. Every result now has ⤓ JSON and ⤓ CSV buttons beside “Copy all as text”, saving the lookup as a structured file (query, subject, labels and every field). Generated entirely in your browser — nothing is sent anywhere.
- Security — CSV export hardened against formula injection. Result fields can contain third-party data (WHOIS, TXT, reverse-DNS, vendor names); any value starting with = + - @ is now prefixed so spreadsheets open it as text, never as an executable formula. Fields are also RFC 4180-quoted.
Lothlórien
v1.5.7
2026-06-04
- Changed — Softer dark theme. The dark background was nearly pure black; it's now a lighter charcoal (with the grid and panels nudged to match) for a less harsh look. Light theme unchanged.
v1.5.6
2026-06-04
- Added — New logo. Palantiri now has an orb logo — a glossy magenta sphere — shown beside the title in the header and used as the browser-tab icon (favicon) across all pages.
v1.5.5
2026-06-04
- Fixed — “Copy all as text” spacing. Values that show with a host/selector label (DNS records, reverse lookups, DKIM keys) were being copied with the label jammed against the value and no separators. Copy-all now uses each field's properly formatted text, with labels, separators and multi-line records aligned.
v1.5.4
2026-06-04
- Changed — Roomier DKIM results. When several DKIM selectors are found, their keys now lay out side by side in a full-width, scrollable panel instead of one long stack — easier to scan without the box running off the page.
v1.5.3
2026-06-04
- Security — Tightened the Content-Security-Policy. All page scripts moved to external files so the policy no longer needs to allow inline scripts (script-src 'unsafe-inline' dropped), shrinking the cross-site-scripting attack surface. Also removed an unused entry from the connection allow-list. No change to how the site works.
v1.5.2
2026-06-04
- Security — Hardened the RDAP lookup proxy. The backend that fetches RDAP now validates every HTTP redirect hop (not just the final destination) against an internal-address blocklist, closing a potential server-side request forgery (SSRF) path. No change to results.
v1.5.1
2026-06-04
- Changed — DKIM now shows the keys it finds. When a DKIM selector is detected, the result lists each selector alongside its published record, instead of just naming the selectors.
v1.5.0
2026-06-04
- Added — Email authentication checks for domains. Domain lookups now include an SPF · DMARC · DKIM section. SPF and DMARC are read directly from DNS (with a colour-coded verdict on the DMARC policy), and DKIM is probed across the selectors used by common mail providers. Because DKIM selectors are sender-specific and can't be enumerated, a miss isn't proof a domain has no DKIM — that's noted in the result.
Imladris
v1.4.7
2026-06-04
- Added — FAQ entry for domain status colours. The FAQ now explains the green / yellow / red colour-coding of domain statuses, with the ICANN definitions behind each group and a link to the source.
v1.4.6
2026-06-04
- Added — Colour-coded domain statuses. Every EPP/RDAP status in the WHOIS box is now colour-coded using ICANN's own definitions, which split registrar-set ("client") codes from registry-set ("server") codes:
- Green — healthy. active, or an owner-set protection lock (client…Prohibited) that guards the domain against hijacking, transfer or deletion.
- Yellow — heads-up. Pending operations, grace periods, and registry-level server…Prohibited locks, which ICANN notes can accompany a dispute or pending deletion.
- Red — suspended or being lost. clientHold, serverHold, inactive, pendingDelete, redemptionPeriod — the domain isn't resolving or is heading for deletion.
A short legend appears under the box when any yellow or red status is present.
v1.4.5
2026-06-04
- Added — Problem domain statuses flagged in red. Statuses that mean a domain is suspended or not resolving — hold, pending delete, redemption period, pending restore, inactive — now show in red in the WHOIS status box, with a short note. The normal "… prohibited" locks (which most healthy domains carry) stay neutral so the warning stands out.
v1.4.4
2026-06-04
- Changed — Easier-to-read TXT records. Alternating TXT records now have a slightly different background shade, so a long list of multi-line records is easier to tell apart at a glance.
v1.4.3
2026-06-04
- Fixed — Expiry & updated dates shown for .fi domains. Finland's registry omits these from RDAP and publishes them only in legacy port-43 WHOIS, in a date format the page couldn't read. The backend now reads both fields from WHOIS and normalizes them, so the Expires and Updated boxes fill in for .fi domains.
v1.4.2
2026-06-04
- Fixed — Real registrar shown for .fi domains. Finland's registry publishes only the registrant in RDAP, so .fi results showed the registry (Traficom) in the registrar field. The backend now falls back to legacy port-43 WHOIS to recover the actual registrar. gTLDs are unaffected (their registrar already comes from RDAP).
v1.4.1
2026-06-04
- Fixed — Domain WHOIS now reliable for .fi and other ccTLDs. RDAP registration data is now fetched through the site's own backend instead of directly from each registry. Some registries (notably Finland's rdap.fi) returned CORS headers that browsers rejected after the cross-origin redirect, so their WHOIS boxes intermittently stayed empty. Routing through our own origin removes the redirect and fixes it for every TLD.
v1.4
2026-06-03
- Added — FAQ & glossary page. A new page explaining every term the tool reports — IP, IPv4/IPv6, subnets & CIDR, MAC/OUI, DNS records, WHOIS, RDAP, registries, ASN and ports — linked from the footer.
Númenor
v1.3.2
2026-06-03
- Fixed — IP misdetected as MAC. Addresses like 111.111.111.111 were being treated as MAC addresses (their digits collapse to 12 hex characters). Valid IPv4/IPv6 input is now always detected as an IP address first.
- Changed — Single IP defaults to /32. An IPv4 address entered without a prefix is now treated as a single host (/32) instead of its classful default. Add an explicit prefix (e.g. /24) to analyze a subnet.
- Added — Click the title to reset. Clicking the PALANTIRI heading clears the current search and returns to a clean start page.
v1.3.1
2026-06-03
- Removed — rwhois section. The referral-whois (TCP/4321) panel has been removed from IP results — almost no networks still run rwhois, and the RDAP data shown above it is authoritative.
v1.3
2026-06-03
- Added — New primary domain. The site now lives at palantiri.work. The previous address (kasarirokki.com) permanently redirects here.
Tirion
v1.2
2026-06-03
- Changed — Brand name. The tool has been renamed from Palantir to Palantiri across the site.
- Added — Contact details. A support contact address (palantiri-support@proton.me) is now shown in the footer.
Valinor
v1.1.1
2026-06-03
- Added — Public patch notes. This version-history page is now published and linked from the footer.
- Added — Legal disclaimer. Footer now states the tool is provided “as is”, that nothing you type is stored, and that you are solely responsible for your use of it.
v1.1
2026-06-02
- Added — ASN lookup. Query any AS number (e.g. AS15169) for holder / name, registry, country, type and announced IPv4 / IPv6 prefixes, sourced from RIPEstat.
- Added — Port lookup. Enter a port number (e.g. 443, 22, 3389) to see the service name, transport protocol and relevant security notes.
- Input field, examples and detection now recognise port and ASN queries alongside IP, subnet, MAC and domain input.
Cuiviénen
v1.0
2026-06-02
- Initial release.
- IPv4 / IPv6 subnet math — network, broadcast, host range, mask and CIDR breakdown, computed fully in your browser.
- MAC / OUI vendor lookup against a local IEEE database (57k+ entries) with online fallback.
- Domain analysis — DNS zone records (A, AAAA, CNAME, MX, TXT, NS via DNS-over-HTTPS) plus registration WHOIS.
- Public IP WHOIS / RDAP — org, network, registry, country, reverse-DNS and abuse contact.
- Light / dark theme toggle with saved preference.