https://github.com/tomnomnom/assetfinder
Basis
go install github.com/tomnomnom/assetfinder@latest
assetfinder [TARGET_DOMAIN]Find subdomains and some that could be related.
assetfinder --subs-only [TARGET_DOMAIN]Find only subdomains (stay in the scope).