Gather Victim Network Information

Adversaries may gather publicly exposed information about a victim's networks for targeting, including domain registration data, DNS records, subdomains, and associated network addressing. This information may come from public datasets and passive online sources and can inform later reconnaissance or initial access. Commands below are limited to public information collection for authorized domains; they do not perform vulnerability scanning.