Enter one of his domains into whois.sc and then do a reverse IP lookup from there.

Reverse IP: Web server hosts 5 websites (reverse ip tool requires free login)

That will list every domain they know of at that IP. Then you can WhoIs them. If he's small you just may come up with everything he owns.