Make URL Harmless
Defang URLs and domains so they cannot be clicked by accident, or restore defanged indicators to their original form.
- Runs in your browser
- Free to use
About this tool
Security teams share malicious URLs all day and a single accidental click can cost dearly. Make URL Harmless applies the standard defanging conventions used in threat intelligence reports (hxxp, [.], [://], [@]) to any list of URLs or domains, and reverses them when you need the original indicators back for a lookup. Everything runs locally in your browser.
Once refanged, send an indicator to the Domain Reputation Check or Unshorten URL without ever opening it.
How to use it — quick steps
- 01
Enter the urls or domains
Type or paste the urls or domains in the field above, one item per line. Nothing is uploaded.
- 02
Adjust the options
Pick the settings that fit your case; the defaults work for most people. Changes apply instantly.
- 03
Press "Convert"
Press "Convert" or Ctrl + Enter. The result appears instantly below the form. Results can be copied.
Key features of this tool
Nothing leaves your browser
The processing is plain JavaScript that runs on your device: the text you paste is never uploaded to our servers or to anyone else.
Instant results
Results appear the moment you press the button, even for long inputs, and every block has copy and download actions.
Works everywhere
No installation, no account and no limits: the tool works on desktop and mobile, in any modern browser, as often as you like.
Frequently asked questions
Why defang a URL?
Mail clients and chat tools auto-link anything that looks like a URL. Defanging breaks the link so colleagues cannot click a malicious address by mistake, while the indicator stays readable.
Which notation is used?
The de-facto standard in threat intelligence: hxxp://, [://], [.] and [@]. Refanging also understands (.) and {.} variants.
Is this the same as the ones used in STIX / MISP?
Yes, the same conventions are used by most sharing platforms and sandbox reports.