Yeah that’s because it’s not what happened. It’s a common expiration snipe.
That's neither hacking nor stealing
Except the domain did not expire, if you check WHOIS.
That's neither hacking nor stealing