The last week of January, the site was intermittently serving back a 429 response (too many requests) as recorded by the wayback machine. https://web.archive.org/web/20260000000000*/Zombo.com

In the first week of February, the site was down.

On the 8th, it was serving an error page from centos.

On the 9th, it was serving the new content. https://lookup.icann.org/en/lookup for zombo.com shows that it was updated on 2026-02-09 20:34:17 UTC

I believe that a more reasonable explanation would be that the domain name expired, someone saw that being the case, bought the domain name and hosted their own version of it.

I'm not sure that "stolen" is the proper verb to use, or that "hacker" is the appropriate attribution.