http://www.theanswerbank.co.uk/Technology/Ques tion373125.html Further to this e-mail after examining the HTML it was received from green.greenmtmedia.com. This address was genuine because as Peanut says do a tracert which I did successfully and shown as a valid name.
It is highly unlikely that the scam originated from this address as I believe scammers hijack an address. I have sent them an e-mail as they should be aware what might be happening. Any further steps that can be made would be appreciated?