FREE TOOLS / IOC EXTRACTOR & DEFANGER

IOC Extractor & Defanger

Extract IP addresses, domains, URLs, hashes, and email patterns locally from text blocks. Safely defang or refang security indicators to prevent accidental clicking.

Source Text (Max 20,000 characters)

Parsed Indicators (IOC List)

IPv4 Addresses:

Domains:

URLs:

Cryptographic Hashes (MD5/SHA-1/SHA-256):

Possible Email Indicators:

Security Note:

This tool runs locally in your browser. Data entered or generated here is not sent to the server, stored or logged. For safety, use sample data instead of sensitive or real production data.

This tool only extracts indicators from text and performs defang/refang operations. It does not perform reputation checks, maliciousness validation or external lookups.

What is Defanging / Refanging?

Defanging alters the formatting of malicious or suspect URLs, domains, and IP addresses to prevent accidental clicks (e.g. converting http:// to hxxp:// or . to [.]).

Refanging reverses this process to reconstruct the original usable IOC value.