Suggest a way to find web servers for the department

Assume you can access caches in local DNS servers of the department. Can you suggest a way to roughly find out the web servers (outside your department) which are not popular among the users in the department? Describe.