How to find out all subdomains of a site?

Question

Search engines

Hello dear!
It is necessary to calculate all currently available subdomains of the aliexpress.com website. Like shoppingcart.aliexpress.com, star.aliexpress.com, trade.aliexpress.com, etc.
Is there any easy way to crawl/google/get such a list?

Answer 1

It’s just that subdomains don’t give out NS servers (security policy), you need to google already known addresses

Answer 2

There are several options here, from simple to complex:
1. Try to google using a request like inurl:aliexpress.com
2. Scan with online utilities like https://dnsdumpster.com/, https://metascan.ru or https: //censys.io/
3. Run special utilities like Dnsrecon, SubBrute, Knock, Gobuster yourself.