Home

Welcome to the Phish Tank!

What is Phishing?

The UO Phish Tank is a collection of suspicious email messages that have been reported to the UO Information Security Office. There are a couple kinds of messages that appear in the Phish Tank.

Phishing messages: These are harmful emails that target anyone, both within UO and outside. They are marked with a hook (for campus emails) or a globe (for emails outside of campus). You can view these confirmed malicious messages without logging in.
Safe messages (Login to view): These are examples of legitimate emails which are marked with a shield. To view messages that were reported as suspicious but are actually legitimate, please log in. Click the "Login with Duck ID" button, then log in with your Duck ID and password.

Learn more!

Interested in seeing more reports from the UO about spam and decoy messages? Visit our News and Updates page for more information on the latest alerts.

You can find more information on unwanted messages such as phishing emails at our informational spam guide.

Confirmed phishing messages are posted below. Log in with your DuckID to see confirmed legitimate emails, alert status, and the full email content.

Phishing Email (in the wild)
Sender: allan@bentsenvvs.dk
Sent on:
Created on:
A phishing email claiming “UNIVERSITY OF OREGON: New Message Received.” was sent...
Phishing Email (in the wild)
Sender: postmaster@nadhria.com
Sent on:
Created on:
Hello, this is the mail server on nadhria.com....
Phishing Email (on campus)
Sender: From: no-reply@sharepointonline.com CC: BBurkhart@usd497.org
Sent on:
Created on:
Barbara Burkart shared a file with you ...
Phishing Email (in the wild)
Sender: Janice Fletcher <jfletcher@stilwellk12.org>
Sent on:
Created on:
Hello [user] Please find the fax file below....
Phishing Email (in the wild)
Sender: [DuckID]@uoregon.edu
Sent on:
Created on:
Attention [Name] We are deactivating inactive Microsoft accounts today 12.8.2025....
Phishing Email (on campus)
Sender: [DuckID]@uoregon.edu
Sent on:
Created on:
Payroll Bonus, Renumeration Overview - August 2025  ...
Phishing Email (on campus)
Sender: ned.lazaro@thewadsworth.org
Sent on:
Created on:
The email contains a link to a malicious site that requests the user to "press and hold for 3 sec...
Phishing Email (on campus)
Sender: Removed
Sent on:
Created on:
N/A
Phishing Email (in the wild)
Sender: smithouisukqes@gmail.com
Sent on:
Created on:
The message has a subject line of "kmn" and a body of "can i talk to you". ...
Phishing Email (in the wild)
Sender: smithouisukqes@gmail.com
Sent on:
Created on:
The message has a subject line of "kmn" and a body of "can i talk to you". ...