domainfy --whois -n <search_term> # does <search_term>.*... exist and WHOIS
mailfy -n <email> # check all common mail providers for <search_term>
phonefy -m <phone_number>
searchfy -q <search_term>
usufy -n <username>
theHarvester -d <domain> -b <search_engine> -l <number_of_searches>
# find IPs, emails, hosts
$ recon-ng
> workspace create <workspace-name>
> options list
> db insert companies # or other table
> show companies # or other table
> marketplace search # list marketplace modules
> marketplace install <module|module-containing string>
> modules search # list installed modules
> modules load <module>
> info # includes options
> options set SOURCE <url>
> run
> keys add <shodan_api> <api_key>
Also browser extension