Look at the following output.

The hacker used whois to gather publicly available records for the domain.

The hacker used the "fierce" tool to brute force the list of available domains.

The hacker listed DNS records on his own domain.

The hacker successfully transferred the zone and enumerated the hosts.