Phillip Vandry <vandry@Mlink.NET> writes:
How do you find them all? You could check your DNS logs for lame
delegations and collect a list, but that's not all that great.
1) whois yourdomain.com
Look for the FQDN of the first nameserver, say dns1.yourdomain.com. This
the Internic calls it which may be different from what reverse DNS calls it.
2) whois dns1.yourdomain.com
Look for the record identifier at the top, say DNS123-HST.
3) whois "server DNS123-HST"
Lists the domains served by that name server.