Add dead CNAME record- and wrong NS record-based takeover checks

[mhmdiaa]

Updates

• Use https://github.com/miekg/dns for DNS queries instead of dig (new dependency).
• Check if the target subdomain has dead CNAME records.
• Check if the subdomain has an authoritative nameserver that isn't willing to answer queries (returns SERVFAIL/REFUSED).