Gondolin
v1.19.2
2026-10-17
latest
- Fixed — Security review fixes.
A full security check of the site found no serious problems; these smaller ones are fixed:
- Fixed — One slow lookup no longer holds up everyone else’s.
The lookup server now handles several requests at once, with a fair limit per visitor. If it is
fully busy it says so straight away instead of making you wait.
- Fixed — Pasted route lines are fully escaped. The Metric
value of a
/proc/net/route line could put formatting tags on the page (no scripts could run).
- Fixed — Tighter server limits. The lookup cache has a size
limit and the service a memory limit, an IPv6 address with a zone suffix (
%eth0) no longer
causes an error, and the check that keeps lookups away from internal networks now also blocks
carrier-grade NAT and NAT64 address ranges.
v1.19.1
2026-10-17
- Fixed — Byte-reversed /8, /16 and /24 masks were misread.
A little-endian mask such as
00FFFFFF (/24) was taken as a wildcard mask, so the address
and subnet came out wrong. It is now read as the netmask, and the wildcard reading is offered as a link.
- Fixed — Contradictory byte-order note. For some normal
(big-endian) pairs the note also said the byte order couldn’t be told.
- Changed — Generic examples. The hex examples on the
page, in the FAQ and in these notes now use a private address (192.168.1.10/24).
v1.19.0
2026-10-17
- New — Hex address + mask pairs.
Paste an address and a mask in hex, e.g.
0xC0A8010A/0xFFFFFF00 (or with a space), and it is
analyzed as 192.168.1.10/24. Mixing hex and normal notation works too
(192.168.1.10 0xFFFFFF00), and a hex wildcard mask is recognised.
- New — Byte order detected from the mask.
Linux and some dumps store addresses backwards (little-endian). A mask is only valid one way round, so
Palantiri uses it to decide how to read the address and tells you which way it read it — e.g.
0A01A8C0 00FFFFFF also gives 192.168.1.10/24.
- New — Route view.
Three values, destination gateway mask, are shown as a route: “192.168.0.0/24 via
192.168.2.1”, the default route, or “directly connected” when the gateway is 0.0.0.0.
Works with hex, with the columns of
route -n, and with a whole pasted
/proc/net/route line (also shows the interface, flags and metric). It warns when the
destination has host bits set or the gateway sits inside the network it routes to.
- New — Two addresses side by side.
If the second value isn’t a mask, both are decoded and shown as separate addresses.
- Docs — New FAQ entry “Can I paste IP addresses, masks and
routes in hex?” and a new example button.
Isengard
v1.18.3
2026-10-15
- Fixed — The Country field for AS numbers was always empty.
The country is looked up in the regional internet registries (RDAP), but the browser was not allowed
to contact them directly, and the failure was silent. The lookup now goes through Palantiri’s own
server, like the other registry lookups — e.g.
AS719 → Finland (FI),
AS15169 → United States (US).
- Changed — Only real countries are shown.
Registries store addresses in different ways, so the answer is checked against a list of real
country names. If no country can be confirmed, the field shows “—” instead of
guessing (for example, it won’t show a street or city).
v1.18.2
2026-10-15
- Fixed — Many MAC addresses showed “IEEE Registration Authority” instead of the real maker.
Smaller companies get their MAC addresses in smaller blocks that sit inside a larger block
registered to the IEEE itself. The lookup stopped at that larger block, so about a third of the
vendor database could never be shown. It now picks the most specific match — e.g.
00:50:C2:00:01:23 → T.L.S. Corp.
- Changed — Safer monthly vendor database update.
A download that looks broken or much smaller than the current one is now rejected and the
existing database is kept, so a bad update can’t wipe out MAC lookups.
v1.18.1
2026-10-07
- Fixed — Hex IPs could still show “Not a valid IPv4 address or MAC”.
Browsers could keep running the old cached script after v1.18.0. The script link is now versioned,
so every release is picked up right away.
- Changed — More hex formats accepted.
Per-byte prefixes and short bytes now decode too:
0xC0.0xA8.0x01.0x01,
c0.a8.1.1, C0 A8 1 1 → 192.168.1.1.
v1.18.0
2026-10-07
- New — Hex-encoded IP addresses are decoded.
Paste an IP in hexadecimal and it is translated and analyzed like a normal address:
8 hex digits become IPv4 (
0xC0A80101, c0a80101, c0:a8:01:01,
c0.a8.01.01 → 192.168.1.1) and 32 hex digits become IPv6. A trailing prefix
works too (0A000000/8). For IPv4 the result also offers the byte-reversed
(little-endian) reading, as found in Linux /proc/net/tcp — e.g.
0100007F → 127.0.0.1. Decoding is fully local in your browser.
Arda
v1.17.9
2026-06-14
- New — Your public IP shown on page load.
A bar below the input detects and displays your public IP address, city, country and ISP
on arrival. Clicking the IP chip triggers a full analysis instantly.
v1.17.8
2026-06-13
- Changed — Default theme is now Light.
First-time visitors (and anyone without a saved preference) now open the site in Light mode
instead of following the operating system colour scheme. Previously saved theme choices are unaffected.
v1.17.7
2026-06-13
- Changed — Dim mode revised to Ember (warm amber).
The mid-grey purple palette has been replaced with a dark amber / burnt-brown theme:
deep amber background, warm cream text, brown-tinted panels and grid lines.
Hot-pink accents remain unchanged — they now contrast against warm amber rather than cool grey.
v1.17.6
2026-06-12
- Docs — Patch notes split into pages; release codenames added.
Older releases (v1.0–v1.13, Cuiviénen through Minas Tirith) moved to a dedicated
archive page. Every minor-version release group now carries
a Lord of the Rings / Silmarillion codename shown as a visual divider between
groups. Future releases will also carry a codename.
v1.17.5
2026-06-12
- Docs — FAQ overhaul.
Rewrote the “What is Palantiri?” entry to list all feature areas. Expanded
“Where does data come from?” to separate client-side from server-side lookups.
Added entries for: search history navigation (arrow keys), IP reputation / DNSBL
(Spamhaus ZEN, SpamCop, Barracuda), TLS certificate checking, email authentication
(SPF / DMARC / DKIM), DNS propagation, and domain reputation / DNSBL (Spamhaus DBL,
SURBL, URIBL). Fixed ambiguous “smaller prefix” wording in the
subnet planner section.
v1.17.4
2026-06-12
- Docs — FAQ: subnet planner section added.
New Subnet planner category in the FAQ covers: what the planner is, how to open it,
adding and removing subnets, automatic alignment, the visual SVG bar, and the free-space
summary. TOC updated with a direct link.
v1.17.3
2026-06-12
- Changed — Subnet planner bar replaced with inline SVG.
Dropped the CSS flex bar in favour of an inline
<svg> with exact
user-space coordinates: allocated blocks are solid pink rectangles, free space
uses a diagonal stripe pattern. Name and prefix label appear inside each segment
when it is wide enough; hover tooltip shows range and usable host count. The SVG
approach guarantees pixel-perfect edge-to-edge fill with no rounding artefacts.
v1.17.2
2026-06-10
- Fixed — Subnet planner bar now fills edge-to-edge.
Changed bar segment rendering from proportional
flex:N to exact percentage
flex-basis (flex:0 0 X%) for all-but-last segments, with the final segment
using flex:1 to absorb any floating-point rounding and guarantee the bar
always reaches the right edge. Also removed the 3 px minimum width that was
preventing tiny free slices from rendering at their true proportional size.
v1.17.1
2026-06-12
- Changed — Subnet planner bar improved.
Removed the gap between segments so a fully-allocated block now renders as a
continuous solid bar with no breaks. A 2 px dark separator between adjacent
segments replaces the old gap. Free (unallocated) space now uses a diagonal
stripe pattern instead of a flat panel colour, making it immediately readable
as “available space”. Bar height increased from 30 px to
36 px for better visual weight.
v1.17.0
2026-06-12
- Added — Subnet planner.
Type any IPv4 CIDR followed by
plan (e.g. 10.0.0.0/22 plan)
to open an interactive subnet allocator. Add child subnets by choosing a prefix
length and optional name; the tool places each allocation at the first correctly
aligned free address and shows a live colour-coded bar of the parent block divided
into allocated (pink) and free (dim) segments. Each entry shows network address,
host range, usable host count and broadcast. Free space is listed with the exact
CIDR blocks available. Remove any allocation to reclaim the space. Entirely
client-side — no network calls.
Barad-dûr
v1.16.0
2026-06-11
- Added — Domain reputation / blocklist check.
Domain lookups now include a Reputation / blocklists section that checks the
domain against three DNS-based blocklists — Spamhaus DBL (spam, phishing,
malware, botnet C&C, abused-legit categories), SURBL (phishing, malware,
spam), and URIBL (black / grey / red). Results are colour-coded with a plain-English
reason for each listing, identical in style to the IP reputation section. All queries run
client-side via DNS-over-HTTPS; no new third-party endpoints are involved.