Is this email a spam or wrong security practice?

[Miro]

Got officially looking email from isc2.org. And yes, my annual fee is due soon

All the links in that email, even the ones saying ISC2 have a "foreign" domain linked to it - "https://cl.s12.exct.net/?qs=9794952c7..."

I just checked the certificate and it's issued to SalesForce

As I did not click on any of links, this is either a really well disguised phishing email, or a blatantly wrong practice by ISC^2 and goes against some of key anti-phishing tenants we try to teach others to apply

[Roels]

Exactly my thoughts also when receiving a similar e-mail today.. interesting also that there's no response at all from ICS2 in this member-support thread?

cheers,

Roel.