Further – if I pull the URL out of the source i.e.
https://dashboard.wordpress.com/wp-admin/index.php?page=estats&blog=_______&noheader=true
then it works fine. It is just when it is in the iframe on the dashboard embedded in my admin panel that it fails.
I have also tried wiping all wordpress.com cookies and starting again but noooo.