子域名收集

crt.sh

高级搜索

%.xx.com

 https://hackertarget.com/find-dns-host-records/

 https://dnsdumpster.com/