Maybe this is a (failed?) supply chain attack of some kind? But it seems more likely that the domain registration expired and was quickly renewed but that existing DNS records got wiped.