DNS

Domain Name System (DNS) - Port 53

Zone Transfer

Zone transfer information can be used to reveal all DNS information such as additional host names.

dig axfr @IP # Try zone transfer without domain
dig axfr @IP DOMAIN # Try zone transfer guessing the domain