Analyze DNS records and history.
Identify open ports on a server.
Discover subdomains of a given website.