finalrecon

All-in-one web recon (headers, whois, DNS, crawl) (authorized only).

$ finalrecon --url https://target --headers
$ finalrecon --url https://target --full