🦷 IOC Fang / Defang

Safely defang URLs, IPs, domains, and emails for sharing IOCs (Indicators of Compromise) without risk of accidental clicks or triggering security tools.

Quick Examples

Click to load example IOCs

Defang Reference

Type Fanged (Dangerous) Defanged (Safe)
URL https://evil.com/malware hxxps://evil[.]com/malware
IP Address 192.168.1.1 192[.]168[.]1[.]1
Domain malicious-domain.com malicious-domain[.]com
Email attacker@evil.com attacker[@]evil[.]com
IP:Port 10.0.0.1:4444 10[.]0[.]0[.]1[:]4444

Why Defang IOCs?

  • • Prevent accidental clicks on malicious links in reports/emails
  • • Avoid triggering security tools that scan for live URLs
  • • Safely share threat intelligence in documents and chat
  • • Prevent browsers from auto-linking URLs
  • • Standard practice in incident response and threat hunting