Service ID: D203ZFVAHD7609

What's wrong with this email?

1. This email came from a compromised internal NECC account. So while the email may look like it's from a genuine source, it is in fact a fraudulent phishing attempt.

2. NECC Course Evaluations are handled by a third party system, EvalKit, Course Evaluations would never be stored on our public facing website that is freely available to the public.

3. If you hover (place your mouse pointer, but don't click) over the "http://necc.mass.edu/faculty/course.php?id=D203ZFVAHD7609" text, you'll see that the link they want you to click on will be taking you to https://tinyurl.com/yap3jws6. This link is a little bit more tricky than the others as it uses a "url shortener" to mask the actual destination of the URL. Unshortening the url, you will see that it is really bringing you to this url: https://davilasemijoias.com/wp-includes/necc.mass.edu/ - and you can clearly see this has nothing to do with NECC or Course Evaluations. Again, just because it has "necc.mass.edu" in the domain somewhere, doesn't make it a real NECC domain.