Datacenter geo scanner

Cloaking is often geo-fenced: a malicious site serves its payload only to visitors from the countries it targets, and a clean decoy to everyone else. A scanner that always exits from one place can’t see that. whack.sh is a datacenter geo scanner — it loads any URL from an in-country datacenter exit in a country you choose, then diffs that capture against your baseline. When the page changes by country, that difference is the geo-cloak slipping.

Scan a URL as if you were in another country

Pin a scan to a country and your datacenter leg exits from an IP there — with residential and mobile too, where available — so the target decides what to serve based on where it thinks you are. To surface a geo-fenced branch, run the URL in one country and compare that report against a scan from another country — or against your US baseline: the traffic-distribution system, doorway or phishing kit that only fires for one region shows itself in the difference. It’s the same split-horizon technique whack.sh uses across network sources, aimed at the geography axis.

Countries you can pin

Pin your scan to any of these countries — each has a datacenter pool with enough coverage to route a scan there:

Africa

Asia

Europe

North America

Oceania

South America

The exit is a geo-targeted best effort, not a guarantee — so every report geolocates and shows the true exit IP, country and network for each leg. For the strongest signal, pair a geo exit with residential and mobile sources.

What a geo scan returns

A geo datacenter leg is priced exactly like a US datacenter leg — free for the first 5 MB, then 1 cr/MB, and offline or unreachable legs are never charged. See pricing and the API docs.

Run a geo scan How it works Pricing