🇮🇹 IT 🇬🇧 EN

URL Decoder/Encoder & Defanger

Decode, encode and defang URLs for safe analysis

What is a URL Decoder/Defanger?

A URL Decoder/Defanger is an essential tool for developers and security analysts that allows you to decode URL-encoded characters, encode strings to URL-safe format, defang malicious URLs for safe sharing, and analyze complete URL structure.

Main Features
  • URL Decoder - Converts %XX characters (e.g., %20, %3A) to readable format
  • URL Encoder - Transforms special characters to URL-safe format for transmission
  • URL Defanger - Makes malicious URLs safe (hxxp://, example[.]com) for IOC sharing
  • URL Parser - Extracts protocol, hostname, path, query params and fragment

Use Cases

  • Security Analysis - Analyze suspicious URLs from phishing emails without risks
  • Web Development - Debug GET parameters and encoded query strings
  • Threat Intelligence - Share IOCs safely with defanging in reports
  • Digital Forensics - Extract and analyze URL components from system logs
Privacy & Security

🔒 This tool works entirely in your browser. URLs are NOT sent to the server and remain private on your device. Perfect for analyzing malicious URLs safely.

Complete Usage Examples

1. URL Decoder - Encoded Query String

Input: https%3A%2F%2Fwww.example.com%2Fsearch%3Fq%3Dtest%20query%26lang%3Dit

Output: https://www.example.com/search?q=test query&lang=it

2. URL Encoder - Parameters with Special Characters

Input: name=John Doe&email=test@example.com&data={"key":"value"}

Output: name=John%20Doe&email=test%40example.com&data=%7B%22key%22%3A%22value%22%7D

3. URL Defanger - Safe IOC Sharing

Input: https://malicious-site.com/payload.exe

Output: hxxps[://]malicious-site[.]com/payload[.]exe

4. URL Defanger - IP Address

Input: 203.0.113.45

Output: 203[.]0[.]113[.]45

5. URL Parser - Credentials and Phishing Detection

Input: https://google.com@evil.com/fake-login

Output: ⚠️ Suspicious URL | Username: google.com | Hostname: evil.com (real domain!)

6. URL Parser - Homograph Attack (IDN)

Input: https://www.exаmple.com (Cyrillic 'а')

Output: ⚠️ Homograph | Unicode: www.exаmple.com | Punycode: www.xn--exmple-yof.com

7. URL Parser - Complex Query String

Input: https://api.example.com:8080/v1/users?id=123&filter=active&sort=name#section-2

Output: Protocol: https: | Host: api.example.com | Port: 8080 | Path: /v1/users | Params: id=123, filter=active, sort=name | Fragment: #section-2

8. Recursive Decoder - Multiple Encoding

Input: https%253A%252F%252Fexample.com (double encoded)

Output: https://example.com (Decoded 2 times)