I don't know if this is going to help, but I'm an IT Analyst, and know something about this.
I took a look at the websites as they were discovered. The fact that they were all registered by the same Proxy Domain service raised a few eyebrows, no doubt...but what's even more strange, was that each website was posted along with a message along the lines of "Hey, look at this SA trading website... Oh, and look at the website they copied." How an individual can find a website that another website was ripped from that quickly, is... well, next to impossible. But alas, stranger things have happened.
With regards to the "Dana Salzarulo." Yes, his name was plastered all over the source code for the websites. I don't remember if it was all of them, or some, but I definitely saw his name there. For those of you who are technically inclined: there were various links that were pointing to his local workstation that was running a windows Operating system, Windows 2000 or newer. The links pointed to a file that resided within the logged on user's local profile which resides in "Documents and Settings\*userID*." In this case the userID was "Dana Salzarulo"... so the some of the links looked like:
"C:\Documents and Settings\Dana Salzarulo\My Documents.."
Does that explicitly imply that the named person is responsible for creating the website? Not really. What it does say is that the person who created the website did so using an account on the computer with a user ID called "Dana Salzarulo." Draw whatever conclusions you want from this.
With all that said, I could make the arguement that a person who had made as many mistakes on these website as he did, using the software he was, probably doesn't know enough about computers and websites to cover his tracks as well as he should have, if those were his intentions.