The nslookup command exists on both Windows and *NIX, but is particularly important on Windows (where dig is not available).
On Windows, the nslookup.exe binary also provides a nice shell if run without any arguments. From here, a server to query can be specified (server $IP_ADDRESS
), and then ls -d $DOMAIN
will provide all records related to the specified $DOMAIN
(including, it would seem, subdomain information!).