TopRank Skills
EN
English 简体中文 français

Search

PythonReactSEOPDF
OpenClaw

site-analyze

网站机房溯源全维度分析工具。当用户要求分析某个网站的机房位置、CDN、IP归属、路由链路、响应延迟、SSL证书、子域名等信息时使用。支持通过 DNS over HTTPS（阿里/腾讯/360）查询绕过UDP封锁，自动识别 Cloudflare、Akamai、阿里云、腾讯云等主流CDN，输出完整的溯源分析报告。

evanfromdowntown0 source installs☆ 0 Repository stars
View source ↗InstallationSKILL.md ↗

Installation

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.

SkillHub CLI

skillhub install evanfromdowntown/site-analyze

Inspect the source and compatibility requirements, then follow its installation steps.

Give your agent the source link and ask it to inspect instructions and dependencies before explaining the installation steps.

View source ↗Guides

Skill instructions

Site Analyze — Website Infrastructure Tracer

Runs 9 analysis modules and prints a full infrastructure report for any domain. No API keys required. Works from any network with outbound HTTPS access.

Usage

python3 scripts/site-analyze.py <domain>

Accepts bare domains or full URLs (scheme/path stripped automatically):

python3 scripts/site-analyze.py example.com
python3 scripts/site-analyze.py https://example.com/some/path

Analysis Modules

# Module Method
0 DoH server probe Auto-detects working DNS-over-HTTPS servers from 8 candidates
1 DNS resolution Multi-server DoH (Google/CF/Quad9/AliDNS/DNSPod/360/AdGuard/OpenDNS) + A/AAAA/MX/NS/TXT/SOA
2 IP geolocation & CDN ipinfo.io + built-in ASN→CDN database (Cloudflare, Akamai, Fastly, AWS, Aliyun, Tencent…)
3 Subdomain enumeration Common subdomain DoH scan + crt.sh CT logs + HackerTarget; ⭐ flags non-CDN IPs
4 TCP latency Python socket, 80+443, 3 samples each; warns when IP is anycast
5 HTTP/HTTPS headers curl; extracts CF-RAY, server, x-powered-by, via, proxy-agent, x-cache…
6 HTTPS timing breakdown curl: DNS / TCP / TLS / TTFB / total; estimates one-way RTT to edge
7 SSL certificate openssl: issuer, subject, SAN, validity dates
8 TCP traceroute tcptraceroute (fallback: ICMP traceroute)
9 Summary & verdict Auto-flags discovered origin IPs; advises on CDN-hidden origins

Reading Results

  • TCP latency low but TTFB high → target uses Anycast edge; real origin is farther away
  • anycast: true on an IP → TCP latency reflects nearest PoP, not origin location; use TTFB
  • CF-RAY suffix → Cloudflare PoP that handled the request (AMS = Amsterdam, SJC = San Jose…)
  • proxy-agent: VM-xxx-centos in a 502 → origin server info leaked by Cloudflare error
  • ⭐ subdomain → resolves to a non-CDN IP; likely the real origin

Dependencies

  • Python 3.6+ (stdlib only)...

Source information

Source
github
Repository
openclaw/skills
Path
skills/evanfromdowntown/site-analyze
Version
—
Commit
ca03bcc132743b25ffa3cabb80ff85c95c6b70f2
Classification source
rules
Status
active
Visibility
public

These signals come from indexed source analysis and may lag behind changes. Check the current source files.

Extracted content

SKILL.md
# Site Analyze — Website Infrastructure Tracer

Runs 9 analysis modules and prints a full infrastructure report for any domain.
No API keys required. Works from any network with outbound HTTPS access.

## Usage

```bash
python3 scripts/site-analyze.py <domain>
```

Accepts bare domains or full URLs (scheme/path stripped automatically):

```bash
python3 scripts/site-analyze.py example.com
python3 scripts/site-analyze.py https://example.com/some/path
```

## Analysis Modules

| # | Module | Method |
|---|--------|--------|
| 0 | DoH server probe | Auto-detects working DNS-over-HTTPS servers from 8 candidates |
| 1 | DNS resolution | Multi-server DoH (Google/CF/Quad9/AliDNS/DNSPod/360/AdGuard/OpenDNS) + A/AAAA/MX/NS/TXT/SOA |
| 2 | IP geolocation & CDN | ipinfo.io + built-in ASN→CDN database (Cloudflare, Akamai, Fastly, AWS, Aliyun, Tencent…) |
| 3 | Subdomain enumeration | Common subdomain DoH scan + crt.sh CT logs + HackerTarget; ⭐ flags non-CDN IPs |
| 4 | TCP latency | Python socket, 80+443, 3 samples each; warns when IP is anycast |
| 5 | HTTP/HTTPS headers | curl; extracts CF-RAY, server, x-powered-by, via, proxy-agent, x-cache… |
| 6 | HTTPS timing breakdown | curl: DNS / TCP / TLS / TTFB / total; estimates one-way RTT to edge |
| 7 | SSL certificate | openssl: issuer, subject, SAN, validity dates |
| 8 | TCP traceroute | tcptraceroute (fallback: ICMP traceroute) |
| 9 | Summary & verdict | Auto-flags discovered origin IPs; advises on CDN-hidden origins |

## Reading Results

- **TCP latency low but TTFB high** → target uses Anycast edge; real origin is farther away
- **`anycast: true`** on an IP → TCP latency reflects nearest PoP, not origin location; use TTFB
- **CF-RAY suffix** → Cloudflare PoP that handled the request (AMS = Amsterdam, SJC = San Jose…)
- **`proxy-agent: VM-xxx-centos`** in a 502 → origin server info leaked by Cloudflare error
- **⭐ subdomain** → resolves to a non-CDN IP; likely the real origin

## Dependencies

- Python 3.6+ (stdlib only)...

Related skills

OpenClaw

humanpages

human-pages-ai

Search and hire real humans for tasks — photography, delivery, research, and more

☆ 3View skill
OpenClaw

openclaw-skills

zseven-w

Reusable skill templates for OpenClaw AI agents. Templates for API integration, data processing, web scraping, CLI tools, and file processing.

☆ 1View skill
OpenClaw

0xarchive

0xfantommenace

Query historical crypto market data from 0xArchive across Hyperliquid, Lighter.xyz, and HIP-3. Covers orderbooks, trades, candles, funding rates, open interest, liquidations, and data quality. Use when the user...

☆ 0View skill
OpenClaw

1sec-security

cutmob

Install, configure, and manage 1-SEC — an open-source, all-in-one cybersecurity platform (16 modules, single binary) on Linux servers and VPS instances. Use when the user asks to secure a server, install securi...

☆ 0View skill