A financial services company reports that employees keep clicking links in phishing emails that pass the initial email gateway inspection because the destination pages are weaponized only hours after delivery. The security team needs a control that re-evaluates the reputation and content of a link at the moment the user actually clicks it, rather than only when the message is received. Which control best addresses this requirement?