Subdomain takeover proof of concept