Safely defang, refang, and extract Indicators of Compromise (IOCs) such as URLs, IP addresses, domains, email addresses, and file hashes.
Use it to prepare indicators for security reports, tickets, chat, logs, and threat-intelligence work. Your input is processed directly in your browser.
IOC Toolkit
Defang, refang, and extract indicators of compromise from URLs, IPs, domains, emails, hashes, logs, and raw text.
What is IOC defanging?
Indicators of compromise (IOCs) — malicious URLs, IPs, and file hashes — can trigger security filters or get accidentally clicked when shared as-is in reports, tickets, or chat. Defanging neutralizes them (http://evil.com becomes hxxp://evil[.]com) so they're safe to paste anywhere. Refanging reverses it when you need the live value back for a sandbox, firewall rule, or threat-intel lookup.
64BitSensei tools
