ASSETFINDER

https://github.com/tomnomnom/assetfinder

Basis

go install github.com/tomnomnom/assetfinder@latest

assetfinder [TARGET_DOMAIN]
Find subdomains and some that could be related.

assetfinder --subs-only [TARGET_DOMAIN]
Find only subdomains (stay in the scope).