Got officially looking email from isc2.org. And yes, my annual fee is due soon
All the links in that email, even the ones saying ISC2 have a "foreign" domain linked to it - "https://cl.s12.exct.net/?qs=9794952c7..."
I just checked the certificate and it's issued to SalesForce
As I did not click on any of links, this is either a really well disguised phishing email, or a blatantly wrong practice by ISC^2 and goes against some of key anti-phishing tenants we try to teach others to apply