What it can do
- Restore hxxp schemes
- Restore bracketed separators
- Restore bracketed dots
How the recipe works
Fang URL
Reverse common defanging conventions without opening the destination.
Demonstration
Sample input
hxxps[://]docs[.]example[.]test/pathExpected result
https://docs.example.test/pathWhen to use it
- Controlled indicator analysis
- Preparing values for offline parsers
- Normalizing report data
Adapt it
Follow with Parse URI to inspect fields without navigating to the restored address.
Source and verification
Adapted from mattnotmax CyberChef recipes. The explanation and sample are written for Serialize, use synthetic or documentation-safe data, and are checked against the current operation catalogue. The workflow runs locally without an external API call.