Hacker News Reader

How did fake-something get injected as a subdomain?

Loads of hosting sites do this, username.domain.tld is the most common one.

I guess it's a good thing my bank doesn't have a free web hosting service