fierce --domain $DOMAIN --dns-servers $IP

Locate non-contiguous IP space and hostnames for a domain via DNS scanning

Command: Linux

References:

https://www.kali.org/tools/fierce/