This was in his source code. Maybe it means something, maybe it doesn't.
saved from url=(0023)
http://www.for4657.com/
Which leads to....
Registrant:
flipper
3434 flip rd
fliptown, al 35224
US
Domain:
for4657.com
Administrative Contact:
flipper clip (FC1213-IYD)
[email protected]
flipper
3434 flip rd
fliptown, al 35224 US
+1.2055685689
(FAX)
Technical Contact:
flipper clip (FC1213-IYD)
[email protected]
flipper
3434 flip rd
fliptown, al 35224 US
+1.2055685689
(FAX)
Billing Contact:
flipper clip (FC1213-IYD)
[email protected]
flipper
3434 flip rd
fliptown, al 35224 US
+1.2055685689
(FAX)
Record created on February 08, 2002
Record last updated on March 21, 2002
Record expires on February 08, 2003
Domain Name Servers in listed order:
NS1.CANDIDHOSTING.COM
NS2.CANDIDHOSTING.COM
Don't know if this is meaningful at all or not but it might get you started.