A method for determining a reputation for a link, comprising: receiving an original link and a recordation of a sequence of a plurality of redirected links associated with an attempt of a user to access the original link at a reputation server from a client, wherein a last redirected link of the sequence of the plurality of redirected links represents a destination to which the client is to be redirected in response to the user clicking on the original link; receiving a protection policy from the client, the protection policy including rules indicating whether the client should be prevented from navigating to the original link; querying a database including reputation information associated with a plurality of links by the reputation server to retrieve a reputation of each of the plurality of redirected links, the reputation information indicating whether the links are associated with a malicious activity; associating the reputation of each of the plurality of redirected links with the original link to create a reputation of the original link; causing the reputation of the original link to be stored in the database, the reputation of the original link created from the reputation of each of the plurality of redirected links; subsequently querying the database to retrieve the reputation of the original link by a client; calculating a policy intersection based on the reputation of the original link and the protection policy, the policy intersection indicating whether the original link is associated with the malicious activity and; sending a notification to the client including the policy intersection for the original link indicating whether the original link is associated with the malicious activity. receiving an original link and a recordation of a sequence of a plurality of redirected links associated with an attempt of a user to access the original link at a reputation server from a client, wherein a last redirected link of the sequence of the plurality of redirected links represents a destination to which the client is to be redirected in response to the user clicking on the original link; receiving a protection policy from the client, the protection policy including rules indicating whether the client should be prevented from navigating to the original link; querying a database including reputation information associated with a plurality of links by the reputation server to retrieve a reputation of each of the plurality of redirected links, the reputation information indicating whether the links are associated with a malicious activity; associating the reputation of each of the plurality of redirected links with the original link to create a reputation of the original link; causing the reputation of the original link to be stored in the database, the reputation of the original link created from the reputation of each of the plurality of redirected links; subsequently querying the database to retrieve the reputation of the original link by a client; calculating a policy intersection based on the reputation of the original link and the protection policy, the policy intersection indicating whether the original link is associated with the malicious activity and; sending a notification to the client including the policy intersection for the original link indicating whether the original link is associated with the malicious activity.