It's a bug in the paywall code. Bank error in your favor. :-)

I believe that technically all domain names start with (we enter them backwards into the browser) a dot and that dot represents the DNS root. So it works in the browser if you add that root explicitly. No idea for sure why this works but my guess is because the paywall is somehow programmed based on window.location or some backend equivalent that works against the domain without the explicit root.