# Defang URL

Takes a Universal Resource Locator (URL) and 'Defangs' it; meaning the URL becomes invalid, neutralising the risk of accidentally clicking on a malicious link. This is often used when dealing with malicious links or IOCs. Defang URL lives in the **Networking** category of the `fx` menu.

## Parameters

| Parameter   | Type    | Required | Default                       | Description                                                                   |
| ----------- | ------- | -------- | ----------------------------- | ----------------------------------------------------------------------------- |
| Input       | string  | yes      | —                             | Value to transform. Previous step output or a literal.                        |
| Escape dots | boolean | no       | `true`                        | Enabled by default.                                                           |
| Escape http | boolean | no       | `true`                        | Enabled by default.                                                           |
| Escape ://  | boolean | no       | `true`                        | Enabled by default.                                                           |
| Process     | string  | no       | `Valid domains and full URLs` | Choose one of: `Valid domains and full URLs`, `Only full URLs`, `Everything`. |

`Input` is the primary value (previous step output or a literal).

## Returned value

| Type     | Description                              |
| -------- | ---------------------------------------- |
| `string` | Result of the Defang URL transformation. |

## Example

<details>
<summary>Run Defang URL</summary>

Takes a Universal Resource Locator (URL) and 'Defangs' it; meaning the URL becomes invalid, neutralising the risk of accidentally clicking on a malicious link. Adjust optional parameters when the defaults do not match your payload.

1. Set **Input** to the value to transform (previous step output or a literal).

2. Review **Escape dots**, **Escape http**, **Escape ://**, **Process** and keep defaults unless your format requires otherwise.

3. Confirm **Output value** shows the transformed result.

</details>