Use Sublist3r to learn everything about Hostname targets to save you days of manual reconnaissance.
Download ThreatPipes to enable the Sublist3r + Hostname enrichment.
FREE Download