Immediately upon letting it lapse it's bought by someone who I believe lives in Russia. They took my website, rehosted an old version found on archive.org, and then put advertisements on the site. It was not rehosted well, half of the links were broken. I wouldn't be surprised if he tried to embed malware on there too.
I emailed the hosting company (DigitalFyre) with a DMCA request to get it taken down. Their support assured me they'd take it down but they never did.
After a year of it being up the domain expired and I bought it back just to prevent someone else from doing the same. I figured it wouldn't be profitable for them so I made the decision to wait them out early on.
I'm thinking the entire process is automated, where they'll buy up expired domains, rehost archived versions, and hope for either the previous owner to purchase it back or for ad revenue to make it worthwhile.
Absolute scum of the earth.