What's a stealth infrastructure takedown? What makes this different from all the other domain registry related attacks on shadow libraries? The same happened to LibGen just a few weeks ago. It's completely normal to only learn of your domain being taken from you after the fact or else you'd just move it to a different domain registry.