Here I made complete command so you can run dirctectly . Total 31 , run them one by one after installing subfinder , these command will generate sni and save them to files named uni1.txt uni2txt .... uni31.txt Run all these subfinder CommandS with data. Now comes the real part , now turn on the data of the Sim in which you don't have any load/recharge and Run the below bugscanner-go command . Replace uni1.txt to uni2.txt for scanning uni2.txt which we have generated earlier with subfinder . replace uni1.txt with uni1.txt uni2.txt ..... uni31.txt to scan all txt files . I know this process takes a lot of time but here I have a trick to save your time if you are scanning For example uni1.txt and dOnt get any response on screen , where scan is completed atleast 10% then skip uni1.txt scan and Scan uni2.txt and so on bugscanner-go scan direct -f uni1.txt -o scanned.txt 1.) Ai subfinder -d aarki.com,Acquisio.com,automizy.com,blue-avenir.com,cartender.com,centricsoftware.com,cevoid.com,contify.com,contlo.com,databreakers.com,egain.com,enghouse.com,ezoic.com,ibm.com,impact.com,inpowered.ai,inuvo.com,keywee.co,livelyimpact.com,logiq.com,neu.ro,nexmind.ai,nowinteract.com,personetics.com,salesforce.com,samba.ai,veritone.com -all -o uni1.txt 2.) Audio Vedio and web conferencing subfinder -d 8x8.com,adobe.com,amazemeet.com,wizewerx.tech,amwell.com,apache.org,arkadin.com,aws.amazon.com,att.com,attendanywhere.com,avaya.com,banzai.io,bigbluebutton.org,bigmarker.com,bombbomb.com,boxcast.com,brightcove.com,brighttalk.com,cisco.com,classolusapp.com,clickmeeting.com,consolto.com -all -o uni2.txt subfinder -d coredial.com,dacast.com,diligent.com,easywebinar.com,eztalks.com,genesys.com,goto.com,granicus.com,kaltura.com,corp.kaltura.com,catenoid.net,pathadvice.at,lifesize.com,livestrom.co,logmein.com,heymarvelous.com,matrix42.com,mediafusionapp.com,mediaplatform.com -all -o uni3.txt subfinder -d megameeting.com,skype.com,nec.com,openmeetingtech.com,pexip.com,globalmeet.com,poly.com,ringcentral.com,vectera.com,veeva.com,verizon.com,vidello.com,vonage.com,webinaris.co,webinarjam.com,genesisdigital.co,whereby.com,zohocorp.com,zoho.com,zoom.us,zype.com -all -o uni4.txt 3.) Marketing analyst subfinder -d 77agency.com,a1webstats.com,abtasty.com,ebis.ne.jp,adjust.com,admo.tv,affise.com,agencyanalytics.com,agentvi.com,charm.io,alliai.com,amplitude.com,appsflyer.com,apteco.com,avantlink.com,callcap.com,campaigntrack.com,capillarytech.com,channelmix.com,cloudamp.com,cometly.com,comscore.com -all -o uni5.txt subfinder -d conductor.com,conversionfly.com,crazyegg.com,crealytics.com,crunchanalytics.com,data-axle.com,crownpeak.com,evidon.com,experian.com,fanplayr.com,fibotalk.com,figpii.com,freshworks.com,funnel.io,funnelscience.com,geotargetly.com,glassbox.com,heap.io,hitsniffer.com,hockeystack.com -all -o uni6.txt subfinder -d hubapot.com,i-click.com,indicative.com,inspectlet.com,hotjar.com,intelliad.com,intellimize.com,june.so,justuno.com,kissmetrics.io,launchlabs.ai,leadforensics.com,leadlander.com,linklyhq.com,luckyorange.com,matomo.org,meniga.com -all -o uni7.txt subfinder -d metrimo.io,clarity.microsoft.com,milestonesys.com,mixpanel.com,mouseflow.com,nice.com,nimbata.com,ninjacat.io,northbeam.io,octaneai.com,octoboard.com,optimizely.com,optimove.com,oracle.com,oribi.io,piwik.pro,ads.spotify.com -all -o uni8.txt subfinder -d ptengine.com,quantcast.com,quividi.com,rampmatrics.com,ro.iq,roistat.com,clicky.com,ruleranalytics.com,saturnone.io,sealmatrics.com,segmentstream.com,semrush.com,setrics.com,shareaholic.com,shinystat.com,simpleanalytics.com -all -o uni9.txt subfinder -d singular.net,sitecore.com,sitespect.com,snoobi.com,socital.com,supermatrics.com,sweetanalytics.com,talkwalker.com,tapclicks.com,taplytics.com,trytemelio.com,thoughtmatric.io,tomi.ai,traackr.com,transunion.com,triggerbee.com,unbounce.com,unless.com -all -o uni10.txt subfinder -d uplandaoftware.com,upwave.com,userguest.com,uxlift.org,uxwizz.com,w3counter.com,webtrekk.com,webtrends.com,wingify.com,wistia.com,yooda.com,one.yooda.com,zalster.com,zoominfo.com,zuko.io -all -o uni11.txt 4.) CRM (famous only, double digit record only) subfinder -d acquia.com,agilecrm.com,amdocs.com,apptivo.com,avolin.com,audienceview.com,jetpackcrm.com,backstopsolutions.com,benchmarkone.com,bitrix24.com,bluecamroo.com,capsulecrm.com,charityegine.net,civicrm.org,close.com -all -o uni12.txt subfinder -d countingworkspro.com,creatio.com,drivecentric.com,epicor.com,freshworks.com,giveffect.com,glennissolutions.com,greenrope.com,gripp.com,hubspot.com,spglobal.com,iriscrm.com,joomag.com,keap.com,operatebeyond.com,netsuite.com,outreachsystems.com -all -o uni13.txt subfinder -d pipedrive.com,redtailtechnology.com,revinate.com,sage.com,salesflare.com,sap.com,sugarcrm.com,superoffice.com,tessituranetwork.com,tnsinc.com,tribecrm.eu,upsales.com,vtiger.com,webcrm.com -all -o uni14.txt 5.) Data Management Platform Software subfinder -d 1plusx.com,hellosmpl.com,8digits.com,admaxim.com,aidata.me,nextuser.com,dailypoint.com,delidatax.net,dstillery.com,dtscout.com,dynata.com,eyeota.com,gator.io,hariken.co,liveramp.com,lotame.com,mediatel.com,melissa.com,navegg.com,nielsen.com -all -o uni15.txt subfinder -d owneriq.com,permutive.com,redpointglobal.com,resonate.com,retargetly.com,dmp.retargetly.com,squadata.net,teradata.com,theadex.com,totvs.com,viafoura.com,triplelift.com,vistashare.com,yeahmobi.com -all -o uni16.txt 6.) Tag manager subfinder -d googletagmanager.com,tagmanager.google.com,openx.com,mthsense.com,commandersact.com,tealium.com -all -o uni17.txt 7.) Account Based Marketing Software Apps, Market Size and Forecast subfinder -d 6sense.com,accountinsight.ai,act-on.com,adapt.io,addaptive.com,marketo.com,albacross.com,alyce.com,aspire.io,b2b-iq.com,bizkonnect.com,bombora.com,buzzboard.ai,calibermind.com,cognism.com,crunchbase.com,cyance.com -all -o uni18.txt subfinder -d dnb.com,d-edge.com,dealsignal.com,demandbase.com,sellingsimplified.com,demandjump.com,digitalzone.com,emoryday.com,factors.ai,folloze.com,fullcontact.com,hushly.com,cartegie.com,intrable.com,kwanzoo.com,leadenhancer.com -all -o uni19.txt subfinder -d leadfeeder.com,leadsbridge.com,leandata.com,linkedin.com,madisonlogic.com,metadata.io,mrpfd.com,spektrix.com,techtarget.com,terminus.com,triblio.com,xiqinc.com -all -o uni20.txt 8.) Sales automation subfinder -d accelo.com,clearbit.com,clientify.com,evolution360.com,hexure.com,kommo.com,leapcp.com,ontraport.com,pabbly.com,visualvisitor.com,webinterpret.com,vouchercart.com -all -o uni21.txt 9.) Sales engagement subfinder -d toutapp.com,apollo.io,autoklose.com,clearslide.com,cirrusinsight.com,dealhub.io,dooly.ai,gong.io,groove.co,growbots.com,aurea.com,playbooks.aurea.com,insightly.com,kixie.com,koncert.com,mailshake.com,reply.io,revenue.io,salesloft.com,spotio.com,yesware.com,vanillasoft.com -all -o uni22.txt 10.) Marketing automation subfinder -d 4cite.com,acoustic.com,act-on.com,activecampaign.com,activetrail.com,illumin.com,acumbamail.com,adfenix.com,getadmiral.com,adroll.com,amobee.com,artsai.com,aweber.com,exponea.com,clickdimensions.com,myemma.com,epsilon.com,mailchimp.com,intuit.com,klaviyo.com,mailerlite.com,omnisend.com,onesignal.com -all -o uni23.txt subfinder -d zemanta.com,privy.com,qualtrics.com,revive-adserver.com,brevo.com,sharpspring.com,skai.io,sojern.com,thetradedesk.com,verticalresponse.com -all -o uni24.txt 11.) ERP financial subfinder -d theaccessgroup.com,acumatica.com,afas.com,bexio.com,ecount.com,epicor.com,exact.com,freshbooks.com,funeraltech.com,ifs.com,infor.com,m3as.com,sage.com,serrala.com,technologyonecorp.com,workday.com,xero.com -all -o uni25.txt 12.) Enterprise Asset Management subfinder -d hexagon.com,realpage.com -all -o uni26.txt 13.)HCM SOFTWARE subfinder -d elmoaoftware.com.au,flarehr.com,inlinemanual.com,paylocity.com,tooltip.io -all -o uni27.txt 14.)Recruiting Software Apps subfinder -d adp.com,ascenderhcm.com,breezy.hr,bullhorn.com,careerplug.com,ceridian.com,cornerstoneondemand.com,erecruiter.com,hireology.com,jazzhr.com,jobvite.com,mitratech.com,paradox.ai,peoplefluent.com,recruitee.com,silkroadtechnology.com,smartrecruiters.com,teamtailor.com,ukg.com,easycruit.com,workstream.us,ziprecruiter.com -all -o uni28.txt 15.) Transactional email subfinder -d bamboohr.com,alibabacloud.com,atmail.com,authsmtp.com,critsend.com,falconoide.com,fastmail.com,flowmailer.com,mailchannels.com,mysmtp.com,mdofficemail.com,netcorecloud.com,mailgun.com,mailjet.com,postmarkapp.com,proton.me,securence.com,smtp2go.com,socketlabs.com,sparkpost.com,twilio.com,ventraip.email -all -o uni29.txt 16.) It service management subfinder -d atlassian.com,connectwise.com,jitbit.com,servicenow.com,vivantio.com -all -o uni30.txt 17.) CDN subfinder -d brandcdn.com,citrix.com,fastly.com,godaddy.com,imperva.com,keycdn.com,edg.io,lumen.com,jsdelivr.com,optimole.com,quantil.com,quic.cloud,stackpath.com,digitalocean.com -all -o uni31.txt 18.) Application hosting subfinder -d a2hosting.com,appdynamics.com,dynatrace.com,datadoghq.com,newrelic.com,raygun.com,sentry.io,pingdom.com,stackify.com,criteo.com,magnite.com,xandr.com -all -o uni32.txt