whoisdomain.comdig{a|txt|ns|mx}domain.comdig{a|txt|ns|mx}domain.com@ns1.domain.comhost-t{a|txt|ns|mx}megacorpone.comhost-amegacorpone.comhost-lmegacorpone.comns1.megacorpone.comdnsrecon-dmegacorpone.com-taxfr@ns2.megacorpone.comdnsenumdomain.comnslookup ->settype=any ->ls-ddomain.comfor sub in $(catsubdomains.txt);do host $sub.domain.com|grep"has.address";done