Well, I have been looking at his site code.
While his site his hosted in hostgator, the form stealing passwords on his site is registered with:
http://scorpiohost.com/Under the domain: BLUEMAGICMARKETINGGROUP.COM
Here is his admin control panel:
http://bluemagicmarketinggroup.com/iem/admin/index.phpWhois info:
Domain Name: BLUEMAGICMARKETINGGROUP.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL:
http://www.enom.com Name Server: NS10.SCORPIOHOST.COM
Name Server: NS9.SCORPIOHOST.COM
Status: clientTransferProhibited
Updated Date: 20-aug-2010
Creation Date: 20-aug-2010
Expiration Date: 20-aug-2011