Somebody created subdomain without my knowledge. How? [duplicate]

Solution 1:

My immediate suspicion was that someone else had control of your domain. There are now two possibilities:

• You've had your account hacked for wherever you host your zone.
• You're using some janky budget DNS host that allows you to host your zone with them for free and in return you allow them to give rights to create subdomains off of your domain. (Side note: Because I'm careless and read only half of your post before I came to my conclusion and started trying to falsify it, I didn't even notice that you explicitly stated afraid.org was your DNS host. I found that out for myself though, as you'll see in two seconds.)

Quick DNSMan! To the digs!

dig +short ns khabarov.ca
ns2.afraid.org.
ns4.afraid.org.
ns3.afraid.org.
ns1.afraid.org.

Well, well, well. What do we have here but good ol' afraid.org. I won't say anything bad about their service, because I don't think it's inherently bad. However you need to be aware of what you're giving when you use them. When you let a free service like afraid.org host your zone, they allow others to create subdomains off of your domain.

Someone used your domain, quite probably at random, and created a subdomain that delivered some nastiness to folks. That subdomain got reported through various channels, and now has the stink of death on it. Sharing is magic!