If you are able to use the webmail of your provider, you may try opening this mail in Edge, right-click on the line of the link and select 'Inspect'. You may see where they try to bring you...
Reporting it back to your provider as 'phishing' usually stops them.