You are viewing a single comment's thread.

view the rest of the comments →

karenrussell63 ago

I'm not sure where he got this list, but my initial thoughts are that this is a misunderstanding in how things work. subdomains aren't published anywhere, except when an ssl certificate is needed to cover that specific subdomain, or if a dns entry is made for verification of some sort, or finally if the website does in fact publish a link to the domain.

It is somewhat common though to set up wildcard subdomains so that any subdomain real or not, just redirects to the main site. the links above as well as a made up subdomain i tested give a 301 http error, meaning that address is moved permanently, as in it's not temporary and all future requests to fake subdomain need to go to main domain.

my best guess, some web crawler followed some links someone made to these domains which resulted in them being cashed somewhere.