What it can do
- Match domain syntax
- Sort hostnames
- Deduplicate repeated names
How the recipe works
Extract domains
Extract bare and URL-contained domains into a clean list.
Demonstration
Sample input
Visit docs.example.test, api.example.test, and docs.example.test.Expected result
api.example.test
docs.example.testWhen to use it
- Log cleanup
- Inventory review
- Threat-report preparation
Adapt it
Enable underscore support for DMARC, DKIM, and other DNS labels that use service prefixes.
Source and verification
Adapted from mattnotmax CyberChef recipes. The explanation and sample are written for Serialize, use synthetic or documentation-safe data, and are checked against the current operation catalogue. The workflow runs locally without an external API call.