Report

Help us improve this tool

URL Defanger

Convert suspicious URLs and IPs to safe defanged text for reports, and restore them with fang mode.

O M T

Defang and fang URLs for safer sharing

Security analysts defang indicators so email clients and chat apps do not auto-link malicious hosts. This tool replaces schemes, dots, and at-signs with bracketed forms, and fang mode restores the original text when you need to test a link again. Combine with URL Extractor when triaging long log files.

Typical defanging rules

  • https:// becomes hxxps[://]
  • Periods in domains and IPs become [.]
  • Email addresses use [@] instead of @

Frequently Asked Questions

Is defanging reversible?

Fang mode restores the common bracket patterns this tool produces. Always review output before clicking restored links.

Does this validate URLs?

No. It performs deterministic text transforms on the characters you paste.

Will every vendor format fang correctly?

Different teams use variants such as hxxp:// without brackets. This tool focuses on the bracket style shown in the samples.

Is data sent to a server?

No. Transformations run locally in your browser.