GOBUSTER

root@oco:~$ gobuster vhost -u http://{domainName}:{targetPort} -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt --append-domain -t 100 -k
 * the -u flag specifies the target URL.
 * the -w flag specifies the wordlist file.
 * the --append-domain flag appends the base domain to each word in the wordlist
 * the -t flag is used to increase the number of threads for faster scanning.
    - default is 10
 * the -k flag can ignore SSL/TLS certificate errors.
 * the -o flag is used to save the output to a file for later analysis