On the 8th, it was serving an error page from centos.
On the 9th, it was serving the new content. https://lookup.icann.org/en/lookup for zombo.com shows that it was updated on 2026-02-09 20:34:17 UTC
I believe that a more reasonable explanation would be that the domain name expired, someone saw that being the case, bought the domain name and hosted their own version of it.
I'm not sure that "stolen" is the proper verb to use, or that "hacker" is the appropriate attribution.
And transferred it away? Registrars make it really hard to do that if you're not the actual person. I'm finding it hard to believe someone can do this anonymously.
Registration expires, someone snaps it up immediately. It happened to a customer of mine with a domain that was their name. It pointed at a page saying it was available for sale for $4000.
In the first week of February, the site was down.
On the 8th, it was serving an error page from centos.
On the 9th, it was serving the new content. https://lookup.icann.org/en/lookup for zombo.com shows that it was updated on 2026-02-09 20:34:17 UTC
I believe that a more reasonable explanation would be that the domain name expired, someone saw that being the case, bought the domain name and hosted their own version of it.
I'm not sure that "stolen" is the proper verb to use, or that "hacker" is the appropriate attribution.
[1]: https://html5zombo.com/
https://github.com/Jonty/zombocom/
https://welcometozombo.com
Had to check... but this is still here https://dack.com/web/bullshit.html