brew install dnsmap

$ dnsmap google.com
dnsmap 0.30 - DNS Network Mapper by pagvac (gnucitizen.org)
 
[+] searching (sub)domains for google.com using built-in wordlist
[+] using maximum random delay of 10 millisecond(s) between requests
 
accounts.google.com
IPv6 address #1: ::ffff:216.58.194.141
 
accounts.google.com
IP address #1: 216.58.194.141
 
admin.google.com
IPv6 address #1: ::ffff:172.217.9.14
 
admin.google.com
IP address #1: 172.217.9.14
 
...