19
down vote
accepted
You can try to initiate a zone transfer.
You are right though, no sanely configured DNS server should still allow this nowadays which incidentally is why I can't provide you with current methods to accomplish this, but in the outdated nslookup utility, you could use ls [name of domain] to get the zone information.
A quick web search yielded the syntax to use with the utility dig: