Users at Contoso report that a phishing email passed inspection because the embedded URL was benign when the message arrived but was weaponized hours later. Management wants Defender for Office 365 to re-evaluate the URL each time a user clicks it, and to block access if the destination is now malicious. Which threat policy configuration should you implement?