it it was hacked the whois would show a redirect.