[2fast4you]

You could port scan the entire IPV4 address space(minus all reserved addresses), send a GET request to everyone that responds, filter for valid HTML. It would take no more than 5 hours on a shitty PC, a lot less if you get a small aws instance.

[luckylion]

Most non-major sites are on shared hosting. Without a host name, you won't get anything useful unfortunately.

[1vuio0pswjnm7]

Most major site are on shared hosting. (Sadly)