No idea for how you’d generate an exhaustive list, although one-off you could walk up a given URL’s host looking for A-records? You’d want some fail-safes there

No idea for how you’d generate an exhaustive list, although one-off you could walk up a given URL’s host looking for A-records? You’d want some fail-safes there presumably. Perhaps you could do this with the common crawl db