Hacker News Reader

The background might be a standard template, and they just have someone paste a logo onto another layer.

The question I have is why paste it in as a data URL rather than just upload the image to the server, if they control the server?

Maybe they do not control the origin server, only the domain and it would be easier just to redirect everyone using DNS.

So the FBI controls the server to which the domain now points ...

Easier to just have all requests respond with exactly the same HTTP response, or something, based on the requested domain.