finalrecon --full --url $URL

All in one web recon covering headers, SSL, whois, DNS, subdomains, and crawling

Command: Linux

References:

https://www.kali.org/tools/finalrecon/https://github.com/thewhiteh4t/FinalRecon