subdomain takeover

proof of concept