Right, well in the email itself the IP url was hidden as a paypal link. I copied the above down from paypals return message. I didn't log into the site, I barely even gave it time to load. But I think it gave my work a virus!
Thanx