So the assumption I'm making here is that they set this (sub)domain up and had the IP as their old servers, the servers have changed hands (since they moved to Wordpress vs. self hosted) and the new owner has a wildcard host entry set up.