Which of the following is LEAST likely to indicate a phishing attack?

An email from your credit card company asking you to verify transactions by calling the number on the back of the credit card

An email from a utility company asks you to enter your date of birth and social security number for verification purposes.

An email from a merchant asks that you click on a link to reset your password.

An email indicates that you have won a large sum of money and asks that you enter your bank account number so that the money can be transferred to you: