dnsenum

Comprehensive DNS enumeration tool that supports dictionary and brute-force attacks for discovering subdomains.

dnsenum --enum inlanefreight.com -f /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -r