I recently discovered a tool called TheHarvester that conducts recon on domain names. The tool gathers names, emails, IPs, subdomains, and URLs by using multiple public resources.
There are several passive modules you can use during your information gathering, however, some require an API key.
You need to be sure