I suggest you to take a look at this: http://10degres.net/subdomain-enumeration/ :-)