Entity search
Records search for the fraudulent company

Cross reference emails, phones, and T&C text
Identity related websites and marketing connected to the fraudulent company

IP scan of website and emails
Identify source of IP address, along with public records of parties associated with IP and domain

Payment destination search
Search for financial institution which collected payments on behalf of fraudulent company

Historical online activity report
Document prior versions of marketing and website for retention and identification