Wednesday, August 24, 2011

Finding all subdomains of any specific domain (DNS afxr)

February 24, 2010 by  
Filed under General


It is possible to get list of all subdomains of any domain name. However, that must be allowed by the DNS Server. This is called AXFR.

Step One: Getting authoritative nameserver(s) from linux shell


Now check the output in authority section. Let assume it is Now use the dig command as follow:

dig axfr

If it is allowed, you should see all the sub-domains under the domain If it has multiple DNS servers, you may try one after another as long as you did not reach your goal.

GD Star Rating
a WordPress rating system
Digg This
Reddit This
Stumble Now!
Buzz This
Vote on DZone
Share on Facebook
Bookmark this on Delicious
Kick It on
Shout it
Share on LinkedIn
Bookmark this on Technorati
Post on Twitter
Google Buzz (aka. Google Reader)

Related posts:

  1. The dos and don’ts of domain registration
  2. How to transfer a domain name
  3. How to point a sub-domain to a different IP Address or Server?
  4. Install WordPress using Fantastico in cPanel
  5. How to edit DNS zone (A, CNAME, TXT) in cPanel (not in WHM) as End User (Domain Owner)


2 Responses to “Finding all subdomains of any specific domain (DNS afxr)”
  1. buy domain names says:

    AXFR us used for replicating DNS data across DNS servers and and thanks for posting this blog regarding AXFR ank keep posting blogs like this.

    GD Star Rating
    a WordPress rating system
  2. Magic-NET says:

    You can also find subdomains using this page:

    If zone transfer is not possible, this tool will use search engine results.

    GD Star Rating
    a WordPress rating system

Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!
Click here to cancel reply.