ClawKit Logo
ClawKitReliability Toolkit
Back to Registry
Official Verified

site-analyze

网站机房溯源全维度分析工具。当用户要求分析某个网站的机房位置、CDN、IP归属、路由链路、响应延迟、SSL证书、子域名等信息时使用。支持通过 DNS over HTTPS（阿里/腾讯/360）查询绕过UDP封锁，自动识别 Cloudflare、Akamai、阿里云、腾讯云等主流CDN，输出完整的溯源分析报告。

skill-install — Terminal

Install via CLI (Recommended)

clawhub install openclaw/skills/skills/evanfromdowntown/site-analyze
Or

Site Analyze — Website Infrastructure Tracer

Runs 9 analysis modules and prints a full infrastructure report for any domain. No API keys required. Works from any network with outbound HTTPS access.

Usage

python3 scripts/site-analyze.py <domain>

Accepts bare domains or full URLs (scheme/path stripped automatically):

python3 scripts/site-analyze.py example.com
python3 scripts/site-analyze.py https://example.com/some/path

Analysis Modules

#ModuleMethod
0DoH server probeAuto-detects working DNS-over-HTTPS servers from 8 candidates
1DNS resolutionMulti-server DoH (Google/CF/Quad9/AliDNS/DNSPod/360/AdGuard/OpenDNS) + A/AAAA/MX/NS/TXT/SOA
2IP geolocation & CDNipinfo.io + built-in ASN→CDN database (Cloudflare, Akamai, Fastly, AWS, Aliyun, Tencent…)
3Subdomain enumerationCommon subdomain DoH scan + crt.sh CT logs + HackerTarget; ⭐ flags non-CDN IPs
4TCP latencyPython socket, 80+443, 3 samples each; warns when IP is anycast
5HTTP/HTTPS headerscurl; extracts CF-RAY, server, x-powered-by, via, proxy-agent, x-cache…
6HTTPS timing breakdowncurl: DNS / TCP / TLS / TTFB / total; estimates one-way RTT to edge
7SSL certificateopenssl: issuer, subject, SAN, validity dates
8TCP traceroutetcptraceroute (fallback: ICMP traceroute)
9Summary & verdictAuto-flags discovered origin IPs; advises on CDN-hidden origins

Reading Results

  • TCP latency low but TTFB high → target uses Anycast edge; real origin is farther away
  • anycast: true on an IP → TCP latency reflects nearest PoP, not origin location; use TTFB
  • CF-RAY suffix → Cloudflare PoP that handled the request (AMS = Amsterdam, SJC = San Jose…)
  • proxy-agent: VM-xxx-centos in a 502 → origin server info leaked by Cloudflare error
  • ⭐ subdomain → resolves to a non-CDN IP; likely the real origin

Dependencies

  • Python 3.6+ (stdlib only)
  • curl (headers + timing)
  • openssl (SSL cert)
  • tcptraceroute or traceroute (optional; traceroute step skipped if absent)
Read Full Documentation on GitHub

Metadata

Author@evanfromdowntown
Stars2387
Views1
Updated2026-03-09
View Author Profile
AI Skill Finder

Not sure this is the right skill?

Describe what you want to build — we'll match you to the best skill from 16,000+ options.

Find the right skill
Add to Configuration

Paste this into your clawhub.json to enable this plugin.

{
  "plugins": {
    "official-evanfromdowntown-site-analyze": {
      "enabled": true,
      "auto_update": true
    }
  }
}
Safety NoteClawKit audits metadata but not runtime behavior. Use with caution.