Maybe I'm wrong, but the only way he could know it was arox is if the ip is shared, but you can just reconnect your internet for a new ip, IP's aren't unique like people think but they would have to be from Norway and I guess from that knowledge it's pretty clear that it was arox.

But he isn't banned? Why does he need to make new accounts?