I got an email from someone who wanted me to ship him a laptop when he pays by express-trader.net.
Eventually I got lucky and realized the verisign logo on their page was a fake. JavaScript sets the statusbar to https://digitalid.verisign.com/,.... whereas it actually loads http://www.express-trader.net/VeriSign.php
I could have lost over $1400