utility / Blue
URL / IP Refanger
Reverse defanging — convert hxxps://[.]example[.]com back to live URLs.
Runs locally
LOCAL WORKBENCH
Mode: Encode / Process
Processed locally
Defanged IOC Input0 chars | 0 bytes
Refanged Active IOCs
http://malicious.example.com
Continue the thread