# example
nmap -vv --reason -Pn -sV -p53 --script="(dns* or ssl*) and not (brute or broadcast or dos or external or fuzzer)" <target>

# example
fierce -dns microsoft.com

# example
dig axfr example.com @10.10.10.123