Wondering if an email message is phishing or not? You've come to the right place!
The UO Phish Tank is a collection of suspicious email messages that have been reported to the UO Information Security Office.
- Phishing messages: You can see messages we've confirmed are malicious without logging in.
- Safe messages: To view messages that were reported as suspicious but are actually legitimate, please log in. Click the "Login" button in the upper right corner, then log in with your Duck ID and password.
If a suspicious message is already posted here, there's no need to report it. You can simply delete it.
If it's not posted here, please report it so we can check it out and consider posting it here. Please always exercise caution with all suspicious messages.
Legend:
A hook indicates a phishing email sent within campus. These emails come from university-owned accounts. Be careful not to click any links or files sent by these accounts. Do not reply.
A hooked globe indicates a phishing email sent from an outside threat actor to campus. These emails are the most common phishing attempts. Avoid attachments and links, and do not reply.
A shield indicates a message that may not be inherently dangerous and is an example of a legitimate-looking email.