Abstract: In an approach, a cloud connector component acts as a broker between a client computer, a security-enhanced domain name server, and a content scanning server. When receiving a domain name service (DNS) request from a client computer, the cloud connector forwards the DNS request to the security-enhanced domain name server. The security-enhanced domain name server performs a DNS lookup on a URL contained within the DNS request to determine a network address for a corresponding content provider. In addition, the security-enhanced domain name server calculates a reputation score for the content provider and determines whether the content provider is trustworthy based on the reputation score. The security-enhanced domain name server then sends a DNS response back to the cloud connector that specifies the network address and the result of the trustworthy determination. If the content provider is trustworthiness, the cloud connector forwards the DNS response to the client computer.