# MAC OUI Lookup

URL: https://phishdestroy.io/developer-tools/mac-oui-lookup
Category: General dev
Where it runs: Runs locally (nothing you enter is uploaded)

Enter a MAC address to see its OUI prefix and, if it is in the built-in list of 40 prefixes, the vendor. The list leans towards virtual machines (VMware, VirtualBox, QEMU/KVM, Hyper-V, Xen), the same prefixes malware looks for to detect an analysis sandbox.

## Example input

VirtualBox network adapter

```
08-00-27-4E-66-A1
```

Prefix 08:00:27, vendor Oracle VirtualBox: the default range for VirtualBox network adapters.

## FAQ

### How does the lookup work?

It takes the first three bytes (the OUI) of a MAC written with colons or hyphens and matches them against 40 prefixes stored in the page: mostly VMware, VirtualBox, QEMU/KVM, Hyper-V, Xen and Parallels, plus some Apple, Dell, Intel, Raspberry Pi and other hardware. Anything else shows Unknown.

### Why is my device Unknown or the vendor wrong?

The list is tiny compared with the IEEE registry and a few of its hardware entries do not match current IEEE data, so confirm important results in the IEEE MA-L database. Phones and laptops often use randomised MACs (second hex digit 2, 6, A or E) that belong to no vendor, and dotted (0800.274e.66a1) or unseparated formats are not parsed.

### Is the MAC address sent to an online database?

No. The prefix is matched against the list built into the page; nothing is looked up online.

## Related tools

- [MAC Address Generator](https://phishdestroy.io/developer-tools/mac-address-generator)
- [IPv6 ULA Generator](https://phishdestroy.io/developer-tools/ipv6-ula-generator)
- [IPv4 Address Converter](https://phishdestroy.io/developer-tools/ip-address-converter)
- [Common Ports Reference](https://phishdestroy.io/developer-tools/common-ports-reference)
- [CIDR / Subnet Calculator](https://phishdestroy.io/developer-tools/cidr-subnet-calculator)

All tools: https://phishdestroy.io/developer-tools