The process of enumerating valid (resolvable) subdomains for one or more domains is known as subdomain enumeration (s). It's difficult to get a list of existing subdomains unless the DNS server publishes a whole DNS zone (through AFXR). A frequent technique is to look up common names in a dictionary and try to resolve them.