He doesn't have control over the domain. It just so happens it points to Azure domain records. He then claimed "control" of the "hosting portion" on Azure on the app service as whatever was there before was gone.