goorecon

Well, this program is pretty much knows the same as the others. Google-based search.

It can search for email addresses and subdomains. First we specify what, and then the where (main domain):

It prints the results to the stdout, as opposed to goohost, which wrote it to a file. We get the IP addresses beside the hostnames as well. The effectiveness of each tool is different, so when we collect information, you may want to try all of them.