It is legit!
I was in a similar but opposite position, having let a domain expire and drop a keen domainer clicked BIN on the Flip listing a couple of weeks after it was registered by someone else (another keen domainer) so I think this is how something like this could happen over long periods...