Free tool
URL & IOC defanger
Defang URLs, domains, and IPs (http → hxxp, . → [.]) so they're safe to paste into emails, tickets, and reports without auto-linking. Also refangs defanged IOCs back to clickable form. Runs locally in your browser.
Runs entirely in your browser. Files and inputs never leave this page.
Live URL/IOC
Defanged output
Defanging makes a URL/IOC safe to share in reports, email, and chat without triggering auto-linking or accidental clicks. Standard defanging replaces . with [.], http with hxxp, and @ with [@].
Need to run 100 of these at once?
The paid Tracelight platform runs this and 30+ other OSINT checks against a list of subjects with citation receipts for every claim.
Try free for 7 days