DNS Beacons Active Canary resolver

[Drakiat]

I like the idea of canaries as plaintext strings on the binary, but an option to actually use them by the implant would be nice. For instance, if an implant has example.com and example2.com as active canary domains, it will attempt to resolve them at a specified intervals, without taking any other actions. This could be used as to make the binary inoffensive from a network analysis perspective