About
Sooner or later you need to send someone a link you'd rather they didn't click — forwarding a phishing text to a friend, reporting a scam, pasting a bad address into a ticket or a group chat. Paste it into dfang to rewrite URLs, email addresses, and IP addresses so nothing treats them as links: no accidental taps, and no chat app helpfully unfurling a preview of a malware site. rfang puts the bite back when you need the original.
Security teams call this defanging indicators of compromise. You don't have to call it anything.
Everything on this site runs locally in your browser: the same Rust code behind the
dfang and
rfang CLIs, compiled to WebAssembly. Nothing you paste is sent anywhere.
There's also a small API for scripting — with the caveat that, unlike this site, it sends your text through Cloudflare.
Links
- PatrickTulskie/dfang — the Rust library and CLI tools
- PatrickTulskie/dfang-web — the source for this site
- patricktulskie.com — the human behind the fox