Paste anything. We'll tell you what it is.
Drop in a token, a certificate, an IP, a cron line, JSON, a cURL command, a hash — anything. We identify it instantly and open the right tool. If it's a domain, IP or URL, we run a live scan.
🔒 100% in your browser — nothing is uploadedDetection is automatic as you type. Try: eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjMifQ.sig · 192.168.1.0/24 · */5 * * * *
Everything the detector recognises
20+ formats, each routed to the right tool. Unlike a static detector, when you paste a domain, IP or URL we run it through a live server-side scan — something a browser-only tool can't do.
JWT (JSON Web Token)
A signed token in three dot-separated Base64url parts (header.payload.signature) used for auth.
eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0In0.abc123
Decoded inline here + Base64 tool →
X.509 / PEM certificate
A -----BEGIN CERTIFICATE----- block. Paste a domain to inspect its live certificate chain & expiry.
-----BEGIN CERTIFICATE-----\nMIIFazCC...
SSL Certificate Checker →
IP address (IPv4 / IPv6)
A numeric host address. We can geolocate it and scan the host it points to.
93.184.215.14
IP Geolocation + live Web Check →
CIDR / subnet
An IP range in slash notation. Calculate masks, ranges and host counts.
192.168.0.0/24
Subnet Calculator →
Domain name
A hostname with no scheme. We can x-ray the whole site in one click.
example.com
Live Web Check + DNS + WHOIS →
URL
A full web address. Run a complete security & tech audit of the page.
https://example.com/path?q=1
Live Web Check →
MAC address
A hardware address. Look up the device manufacturer from the OUI.
00:1A:2B:3C:4D:5E
MAC Vendor Lookup →
UUID / ULID
A 128-bit unique identifier. We show its version and embedded data.
550e8400-e29b-41d4-a716-446655440000
Developer Tools →
JSON
JavaScript Object Notation. Format, validate and inspect it.
{"name":"ninja","active":true}
JSON Formatter →
cURL command
A command-line HTTP request. Replay or convert it.
curl -X POST https://api.site.com -H "Auth: x"
HTTP Headers Checker →
Cron expression
A schedule in 5–6 fields. See the next run times in plain English.
*/15 * * * *
Cron Generator →
XML
Extensible Markup Language. Convert it to JSON or CSV.
<?xml version="1.0"?><root><a>1</a></root>
XML Converter →
Base64
Binary-safe text encoding. Decode it to see what is inside.
SGVsbG8gd29ybGQh
Base64 Encoder/Decoder →
Hash (MD5 / SHA)
A fixed-length fingerprint. We guess the algorithm by length.
5d41402abc4b2a76b9719d911017c592
Security & Encoding Tools →
Unix timestamp
Seconds or milliseconds since 1970. We convert it to a date inline.
1793000000
Developer Tools (timestamp) →
Email address
We can audit the domain behind it (SPF, MX, security).
hello@example.com
Live Web Check of the domain →
API key / secret
AWS, GitHub, OpenAI, Slack & Google key shapes — scan code for leaks before committing.
AKIAIOSFODNN7EXAMPLE
Exposed Secrets Scanner →