From kalilinuxtutorials.com
VHosts-Sieve is a searching for virtual hosts among non-resolvable domains.Get a list of subdomains (e.g. using Amass).Use vhosts-sieve.py to find virtual hosts.
VHosts-Sieve : Searching For Virtual Hosts Among Non-Resolvable Domains