One other possibility that I just thought of is that the PayPal link that you clicked on checkout from Lugess had the typical functionality of a PayPal link but also enabled the seller to get your PayPal login and password. I would check my account and change the password.
