A user signs in to Office 365, and goes to their email inbox. The user opens an email message, and clicks on a URL in the email message. The ATP Safe Links feature immediately checks the URL before opening the website. The URL is identified as blocked, malicious, or safe.