Host host <domain> host -t ns <domain> # Find Nameservers host -t a <domain> # Find IPv4 addresses host -t mx <domain> # Find Mail Servers Dig dig <domain> +short dig -t ns <domain> dig axfr <domain> @<nameserver> # Zone Transfer Automatic DNS Enumeration dnsrecon -d <domain> dnsenum <domain> fierce -dns <domain> Robtex Welcome to Robtex! Login required for some of the information