Subdomain hijackings are a common technique for piggybacking on the prestige of respected institutions, a researcher wrote.