hehe https://radar.cloudflare.com/routing/anomalies/hijack-107469

their bgp monitoring found it :)