Skip to main content

Email Security

Abnormal AI logo company name black background

Abnormal AI will be introduced at UHD on Tuesday, 3/24/26.

Abnormal AI Email Security  brings advanced, behavioral-based protection to our campus by using artificial intelligence to detect and block sophisticated email threats that traditional tools often miss. Instead of relying solely on known signatures or static rules, Abnormal analyzes communication patterns, identifies unusual sender behavior to help stop phishing, social engineering, and account takeover attempts before they reach your inbox. 

Key Features

  • Behavior-Based Threat Detection - Learns normal communication patterns across campus and flags anomolies that include phishing, impersonation, or targeted attacks. 
  • Advanced Phishing & Social Engineering Protection - Identifies and blocks sophisticated phishing attempts, business-email compromise, and impersonation threats issuing behavioral AI rather than static rules or signatures.
  • Malicious Link & Attachment Analysis - Evaluates URL and attachments in real time to prevent harmful content from reaching inboxes.
  • Account Takeover Detection - Monitors for unusual login behavior, suspicious sending patterns, and other indicators of compromised accounts.
  • Graymail & Promotions Management  - Automatically classifies newsletters, marketing emails, and other bulk messages, routing them to your Inbox.
  • Inline Threat Blocking (No Quarantine Required) - Stops malicious messages before they reach your inbox, eliminating the need for a separate quarantine portal or daily digest.
  • User-Friendly Review Options - Allows users to mark messages as safe or report suspicious emails directly from Outlook, improving accuracy over time. 
  • Seamless Cloud-Native Integration - Connects directly to Microsoft 365 for continuous protection without requiring local software user configuration.

Report Suspicious Email Phish Alarm Icon

Outlook Desktop Client

A button, Report Suspicious Email, on your Outlook Client ribbon will allow you to report spam or phishing emails.

  1. Select the spam/phishing email.
  2. Click on the Report Suspicious Email button on the Outlook ribbon.
  3. A new window will appear, to confirm that you want to report the suspicious email. Click Report Suspicious Email.
  4. A message thanking you for reporting the suspicious email will pop up. Click Close.

Outlook Web Access (OWA)

  1. Select the spam/phishing email.
  2. Inside the email message click on the three dots on the top right. (...)
  3. At the bottom of the dropdown menu select Report Suspicious Email.
  4. A new window will appear, to confirm that you want to report the suspicious email. Click Report Suspicious Email.
  5. A message thanking you for reporting the suspicious email will pop up. Click Close.

Mobile Devices

Please note you must use the Microsoft Outlook mobile application to report suspicious emails on your mobile device.

  1. Select the spam/phishing email.
  2. Inside the email message click on the three dots on the top right. (...)
  3. Click on the Report Suspicious Email icon.
  4. A new window will appear, to confirm that you want to report the suspicious email. Click Report Suspicious Email.
  5. A message thanking you for reporting the suspicious email will pop up. Click Close.
 
You can also send spam or phishing emails to security@uhd.edu if you prefer.
 

Abnormal AI Email Security FAQs

Abnormal AI does not use quarantine folder. Instead mail is routed using behavioral AI methodology. See the chart below that decsribes how the various types of email are routed.

Message Type Where It Goes Why
Malicious / Dangerous Not delivered Abnormal blocks it inline before it reaches your mailbox
Bulk / Marketing / Newsletters / (Graymail) Inbox Reduces inbox clutter
Legitimate Messages Inbox Normal communication patterns detected
Spam Junk Email Microsoft's built-in filtering handles this

 

No, mail is simply routed in real time. 

1. Check your other folders

Sometimes messages are delivered but routed differently:

  • Junk Email – spam filtered by Microsoft, newsletters, marketing, bulk mail
  • Other (if using Focused Inbox) – lower‑priority messages
2. Search your mailbox

Use Outlook’s search bar to look for:

  • Sender name
  • Subject keywords
  • Domain (e.g., “@example.com”)

Sometimes messages are delivered but not immediately visible.

3. Review your personal Outlook rules

User‑created rules can:

  • Move messages to custom folders
  • Mark messages as read
  • Delete or archive messages automatically

If something seems missing, a rule may be the cause.

4. If you still can’t find the message, contact IT at itservicedesk@uhd.edu

Because Abnormal does not use a quarantine or digest, blocked messages are not visible to users. Your IT team can:

  • Check whether the message was blocked
  • Review Abnormal’s classification
  • Allow the sender or domain if appropriate
  • Correct any misclassification at the system level
5. If you receive a similar message in the future, help train the system
  • Mark legitimate messages as Not Junk
  • Report suspicious messages using Report Phishing

These actions help Outlook and Abnormal learn your communication patterns over time.

If a legitimate message is misclassified (for example, placed in the Junk folder), you can:

  • Mark it as Not Junk
  • Move it to your Inbox
  • Add the sender to your Outlook contacts

Yes. 

  • Individual: Use Outlook's Block Sender option - Fine the message, right click, block sender
  • Entire Company or Domain: Contact IT - email itservicedesk@uhd.edu