Restricting access to phishing websites is an effective URL filtering use case. URL filtering evaluates web destinations by category, reputation, risk, or policy and can block users from visiting malicious or prohibited sites. Phishing sites are designed to steal credentials or sensitive information, so blocking known or suspected phishing URLs reduces the chance that users will submit passwords or tokens to attacker-controlled pages. Monitoring threat logs and traffic logs is a security operations activity, not the direct purpose of URL filtering. Sandboxing potentially malicious files is a malware analysis function. Discovering IoT devices is asset visibility or IoT security, not URL filtering. URL filtering is especially valuable when combined with user awareness, DNS security, browser protection, and identity-based policy. Because phishing often starts with a link, controlling access to risky web destinations is a practical prevention layer. Reference/topics: Network Security 3.3, URL filtering; Cybersecurity 1.3, social engineering and phishing.