About Defang URL
Takes a Universal Resource Locator (URL) and 'Defangs' it; meaning the URL becomes invalid, neutralising the risk of accidentally clicking on a malicious link. This is often used when dealing with malicious links or IOCs. Works well when combined with the 'Extract URLs' operation.
Input: text. Output: text.
Format reference: Defang URL background and specification
Example
Use “Try example” to load this public sample and its settings, then run it.
Settings used in this example
| Parameter | Example value | Input and choices |
|---|---|---|
| Escape dots | true | On or off |
| Escape http | true | On or off |
| Escape :// | true | On or off |
| Process | Valid domains and full URLs | Valid domains and full URLs, Only full URLs, Everything |
Input
https://example.com/path
Result
hxxps[://]example[.]com/path
Parameters
| Parameter | Default value | Input and choices |
|---|---|---|
| Escape dots | true | On or off |
| Escape http | true | On or off |
| Escape :// | true | On or off |
| Process | Valid domains and full URLs | Valid domains and full URLs, Only full URLs, Everything |
Before interpreting the result
Protocol parsers need the correct byte representation and framing. HTTP Request and DNS over HTTPS contact remote services only when you run them; browser network and CORS restrictions still apply.
How to use this page
- Paste your input or open a local file.
- Adjust tool options if needed, then choose Run tool.
- Copy the result or download the original output bytes.
Inputs and results are not added to the public catalogue or saved in the URL. Processing happens in your browser; HTTP Request and DNS over HTTPS send the requests you explicitly run. Files up to 128 MiB can be opened; decompression and image tools may have smaller processing limits. Large results have a shortened preview. Text and HTML downloads use UTF-8; binary downloads preserve output bytes. Pasted text follows browser newline handling; open a file when exact input bytes matter.