whackDatacenter geo scanner
Cloaking is often geo-fenced: a malicious site serves its payload only to visitors from the countries it targets, and a clean decoy to everyone else. A scanner that always exits from one place can’t see that. whack.sh is a datacenter geo scanner — it loads any URL from an in-country datacenter exit in a country you choose, then diffs that capture against your baseline. When the page changes by country, that difference is the geo-cloak slipping.
Scan a URL as if you were in another country
Pin a scan to a country and every leg exits from an IP there, so the target decides what to serve based on where it thinks you are. To surface a geo-fenced branch, run the URL in one country and compare that report against a scan from another country — or against your US baseline: the traffic-distribution system, doorway or phishing kit that only fires for one region shows itself in the difference. It’s the same split-horizon technique whack.sh uses across network sources, aimed at the geography axis.
Countries you can pin
Geo exits are vetted for coverage and accuracy — each is confirmed to actually land in-country before it’s offered:
- Germany
- United Kingdom
- Canada
- France
- Netherlands
- Spain
- Australia
- Singapore
- Hong Kong
The exit is a geo-targeted best effort, not a guarantee — so every report geolocates and shows the true exit IP, country and network for each leg. For the strongest signal, pair a geo exit with residential and mobile sources.
What a geo scan returns
- A side-by-side capture from each source (datacenter, residential, mobile) exiting the country you chose, with a 0–100 score derived from the divergence between them.
- The full redirect / TDS chain for every leg, each hop enriched with IP, PTR, ASN/org and proxy/VPN intelligence.
- The true exit country and network of every leg — never the gateway — plus screenshots, headers, cookies, TLS and a request timeline.
- A curl-first API that drives it from the first request, and a shareable report you can download as PDF.
Geo datacenter egress is metered — a small base credit per leg covers an included bandwidth allowance, then a low per-MB overage, and offline or unreachable legs are never charged. See pricing and the API docs.