I have sent emails to the composer of the email asking them to call me because I can't tell if it's a phishing email or not.

In some companies, half of their processes link to external services. It's impossible to tell what's legit or not.