This happened to my primary Google account once and only by sheer luck was the domain available and I was able to recover the account. I'm the only one to blam

This happened to my primary Google account once and only by sheer luck was the domain available and I was able to recover the account. I'm the only one to blame because I changed my password at 2 in the morning when notified that someone in another country used it. I didn't put my info into a password manager or remember it because I wasn't truly awake at the time. When recovering I had to go through a bunch of steps and did great up until the email one. Well, Google was firm about wanting access to that email. Odd, considering the domain wasn't registered at the time of requesting a password reset and so I would consider it a security violation to accept that. Needless to say, I am much more stringent on making sure this stuff is set up correctly now.