topic Re: Is this email a spam or wrong security practice? in Member Support

Is this email a spam or wrong security practice?

Miro — Mon, 26 Aug 2024 15:36:12 GMT

Got officially looking email from isc2.org. And yes, my annual fee is due soon

All the links in that email, even the ones saying ISC2 have a "foreign" domain linked to it - "https://cl.s12.exct.net/?qs=9794952c7..."

I just checked the certificate and it's issued to SalesForce

As I did not click on any of links, this is either a really well disguised phishing email, or a blatantly wrong practice by ISC^2 and goes against some of key anti-phishing tenants we try to teach others to apply

Re: Is this email a spam or wrong security practice?

Roels — Thu, 30 Jan 2025 18:18:47 GMT

Exactly my thoughts also when receiving a similar e-mail today.. interesting also that there's no response at all from ICS2 in this member-support thread?

cheers,

Roel.

Re: Is this email a spam or wrong security practice?

InfoSecAddicted — Tue, 19 Aug 2025 13:18:32 GMT

Dear ISC2 Team,

Today I received an email which raised significant security concerns. The included link: https://cl.s12.exct.net/?qs=545...

Was blocked by my local malware detection system
Was blocked by my DNS-based anti-malware and spam filter
Returned multiple suspicious results during a manual domain check

Given ISC2’s role as a leading security organization and the membership fees you collect, it is reasonable to expect that your communication infrastructure adheres to strong security practices. Specifically:

Emails should clearly originate from an @isc2.org sender domain.
Embedded links should be fully transparent, without tracking components, and should clearly resolve to a .isc2.org domain.

If your current email or application provider cannot meet these requirements, I strongly encourage you to reassess the service.

As a security community, we must lead by example and ensure that our communications reflect the standards we promote.

Best regards.

Re: Is this email a spam or wrong security practice?

Roels — Wed, 20 Aug 2025 13:18:10 GMT

A year has passed and still the same practice is used also without any response back from ISC2..

Re: Is this email a spam or wrong security practice?

mariatirado — Fri, 22 Aug 2025 13:18:36 GMT

Hi @Roels - our CX team is currently reviewing your case, and you should be hearing back from them today. Thank you for your patience.

Re: Is this email a spam or wrong security practice?

Roels — Thu, 28 Aug 2025 10:33:55 GMT

Hi @mariatirado ,

I haven't heard anything back (surprise?).

Can someone from ISC2 please at least confirm they understand the issue as well described by @InfoSecAddicted in this thread and propose solutions how it will be solved?

thanks

Roels.

Re: Is this email a spam or wrong security practice?

mariatirado — Thu, 28 Aug 2025 17:29:30 GMT

Hi @Roels, thanks for following up and for raising your concerns. Our Customer Experience team has reached out to @InfoSecAddicted directly and is actively working to resolve the issue. We appreciate your engagement as we work through this together!

Re: Is this email a spam or wrong security practice?

Mrankdnkm — Tue, 18 Nov 2025 21:29:19 GMT

I am also receiving emails from this domain.
Is this a real isc domain or not?
Very simple question !!!

Re: Is this email a spam or wrong security practice?

CyberNenad — Tue, 21 Apr 2026 14:15:03 GMT

End of April and no clear explanation. I am receiving these emails right now. 😠

Re: Is this email a spam or wrong security practice?

kjohnson_cx — Thu, 23 Apr 2026 15:20:36 GMT

Thank you for reaching out via the ISC2 Community @CyberNenad

We apologize for the delay and appreciate your patience. Someone from our team will be reaching out to you shortly to assist further.