1. A method for processing messages using an intermediary node, the method comprising: receiving, at a cloud-based intermediary node, a message from a sender email server; analyzing, via the cloud-based intermediary node, before the message is delivered to a client email server, a link included in the message to determine if the link is associated with a potentially malicious resource, the message received from the sender email server; replacing the link with an alternate link to a trusted resource if the link is associated with the potentially malicious resource; and providing, via the cloud-based intermediary node, the message comprising the alternate link to the client email server, the client email server for delivering the message comprising the alternate link to an email client associated with the client email server, the email client for providing an email recipient with access to the message.