About

dfang defangs indicators of compromise — URLs, email addresses, IP addresses — so you can share them without anyone accidentally clicking a live link or a chat app helpfully unfurling a preview of a malware site. rfang puts the bite back when you need the original.

Everything on this site runs locally in your browser: the same Rust code behind the dfang and rfang CLIs, compiled to WebAssembly. Nothing you paste is sent anywhere.

There's also a small API for scripting — with the caveat that, unlike this site, it sends your text through Cloudflare.

Links

← Back to defanging