However, the name they have replied with is Wu Haisheng
Any update regarding that trace?
I did a quick search on that name and found this guy very capable of setting up such scheme >>>
http://www.linkedin.com/in/wuhaishengIn general, the name is obviously all but common!

Could we think they are changing server again? Or could we think they seal us?
Seems like they wanna be sure that they left no evidence which might identify them before they start moving coins. Once those crooks feel save, our moniez will be insta-gone...