Looks like the offender is using Microsoft's server in Redmond. They probably got hold an administrative password.
Domain ID:D162474987-LROR Domain Name:WSS-ID.ORG Created On:08-Jun-2011 14:30:27 UTC Last Updated On:22-Oct-2011 00:25:53 UTC Expiration Date:08-Jun-2013 14:30:27 UTC Sponsoring Registrar:CSC Corporate Domains, Inc. (R24-LROR) Status:CLIENT TRANSFER PROHIBITED Registrant ID:29199646149db936 Registrant Name:Domain Administrator Registrant Organization:Microsoft Corporation Registrant Street1:One Microsoft Way Registrant Street2: Registrant Street3: Registrant City:Redmond Registrant State/Province:WA Registrant Postal Code:98052 Registrant Country:US Registrant Phone:+1.4258828080 Registrant Phone Ext.: Registrant FAX:+1.4259367329 Registrant FAX Ext.: Registrant Email:[email protected] Admin ID:09997846146d4421 Admin Name:Domain Administrator Admin Organization:Microsoft Corporation
