Query DNS records for any domain. View A, AAAA, MX, NS, TXT, CNAME, and SOA records to understand a domain's infrastructure.
Use targeted dorks to explore further