It definitely raises a red flag mentally when a site you usually login to sends an email with a link to another domain, especially one with odd parts like `.az1`, `/jfe`, etc. Perhaps next year a redirecting shortlink (e.g. `stackoverflow.com/survey2019`) could be used so people can be sure it's not a phishing link. If the current form had asked for login details at the start, I'm willing to bet a lot of people would have entered them! Edit: Apparently a redirecting shortlink *may* have been used (see conflicting info in comments), I didn't receive the email so can't verify.