Nope. foo.bar.example.com is set by example.com, not foo.bar, right? Someone simply bought a domain name then published records which would trick people in a

Nope. foo.bar.example.com is set by example.com, not foo.bar, right? Someone simply bought a domain name then published records which would trick people in a fairly narrow range between "doesn't know what Whois is" and "works with DNS for a living."