Search history of domains using online services

1. https://dnshistory.org/dns-records/<domain>

2. https://www.whoxy.com/<domain>

   <aside> 👀

   Use it also to find other domain registered by the same Registrant 🙂

   </aside>

Subdomains

ReconFTW

https://github.com/six2dez/reconftw

./reconftw.sh -d <[t](<http://atac.roma.it/>)arget.it> -s -o /home/kali/Documents/folder_output

PugRecon (Web Service)

https://pugrecon.com/dashboard/

subfinder

subfinder -all -d <domain> -v -o subfinder_<domain> -oI