Wondering if an email message is phishing or not? You've come to the right place!

The UO Phish Tank is a collection of suspicious email messages that have been reported to the UO Information Security Office.

  • Phishing messages: You can see messages we've confirmed are malicious without logging in.
  • Safe messages: To view messages that were reported as suspicious but are actually legitimate, please log in. Click the "Login" button in the upper right corner, then log in with your Duck ID and password.

If a suspicious message is already posted here, there's no need to report it. You can simply delete it.

If it's not posted here, please report it so we can check it out and consider posting it here. Please always exercise caution with all suspicious messages.