Hypothethically speaking....

VIRCUREX.com (the domain) is registered with GoDaddy Operating Company LLC.
The site uses DDoS protection by CloudFlare inc.
Support was provided via Microsoft Skype.

All of these are american companies.

All of them are in possession of identifying information
about the operators of Vircurex (Billing contacts, IP addresses).

Someone with sufficient stake in the matter could
go to a lawyer. Since this is a clear cut case of fraud,
in violation with a whole range of US Laws, it wouldn't
take the lawyer more than a form letter to obtain the
contact information that is stored with the above companies.
Total cost might be under $300 USD.

GoDaddy in particular _immediately_ releases the
contact information of a proxied domain when a legal process
is initiated against them, in order to protect themselves
from liability (cf. http://www.lacba.org/Files/LAL/Vol29No2/2249.pdf).

Much of the information to be obtained this way
could end up being fake, but there would be starting points.

And if the obtained information was to leak to the
internet by accident, starting points could turn into
real names and street addresses very quickly...

Hypothetically spoken.