The clubvideos one is using a directnic nameserver so if it has adult content they will close it down... Ask them to follow the nameservers (explain what is going on and that the guy is using directnic as a patsy in a scam) , the nameserver trail is interesting.
Also cc it to netsol (find out who to email it to there) and get ALL of the guys domains jerked. Sure, he might get more but do it again. Cause him grief each and everytime he sets it up and sooner or later netsol will have enough info to prosecute for fraudulant activities.
Hmmm see some other names in this trail that I have run across before in scams as well.
Get ALL the nameservers whois info and include that in the letter. They can then trace all the domains that the companies and nameserver named owners possess and they can follow it from there.