#host command
host

# search record
host -t txt
host -t mx

# use hostnames.txt
for ip in $(cat hostnames.txt); do host $ip.domain.com; done

# standard recon (main record types)
dnsrecon -d domain.com -t std

# subdomain bruteforce from list
dnsrecon -d domain.com -D list.txt -t brt

dnsenum domain.com

nslookup domain.com
nslookup -type=TXT info.domain.com