The thing is, registrations are usually in yearly chunks, and the domain was originally registered on 2021-01-12.

I suspect their DNS account was compromised.

Edit to add: Maybe it did expire a month ago, and there was a one month grace period that expired today.