Search Engines

https://www.shodan.io/ - Look for Organizations name, hostnames and others.

https://netlas.io/ - Same as nmap, look for vulnerable servers and so on.