I got this "Here is your tax invoice" email too (once), as a P1. What the heck? The FF and QC links look legitimate apart from the fact they're not https. The PDF preview (I didn't open the PDF) has my name, address and FF #.
If this is a legitimate email, why on earth would they think links to...