Forgetting to renew domain names

TP-Link, who manufactures routers, has forgotten to renew it's 2 domains names, which is widely used. This has now been jacked by someone, who is selling it for $ 2.5 M.

These domain names appear to be quite busy; estimates based on Alexa's ranking suggest that tplinklogin-dot-net sees about 4.4 million visits per month, with another 800,000 for tplinkextender-dot-net.
Seems like TP-Link is not at all interested in buying back those domains ... updating its manuals to remove the domain name references altogether.

This is an ideal way for someone to create spoof website, with a target audience of millions !