when you "hover" over a link in an email, at the bottom of the page you will see where that link will take you. Usually it is a site in some other country, like .ru (russia) - not picking on russia, just saying most of them are off shore and definitely not a real PP site.