Skip to content

Traffic routing and anti-fraud

Bots never reach your offer

Cloaking.Flow inspects every click and decides where to send it. Six checks run in order of cost: the cheap one catches the bot before the expensive one even starts.

Click inspection 1.9 ms
  • 01Campaign  rules loadedok
  • 02Signatures  312 rulesok
  • 03IP address  data centreblock
  • 04Device
  • 05Geolocation
  • 06Flow matching
VERDICT → SAFE ROUTE
Checks per click
06
Countries in geo
250
Browsers
75
Systems
44

Order of checks

The cheap check comes first

The order is deliberate. An obvious bot is caught by step two, and the heavy checks never run — which is exactly where the bulk of junk traffic goes.

  1. 01 Campaign settings Campaign rules and its flows
  2. 02 Bot signatures Known bots, crawlers and scanners
  3. 03 IP reputation Data centres, blocklists, your own ranges
  4. 04 Device 75 browsers, 44 systems, device type
  5. 05 Geolocation Only when the campaign rules need it
  6. 06 Flow matching Priority, split share, daily cap

Live sandbox

Turn on a filter

On the left is the incoming stream. Rules apply instantly: whatever fails goes to the Safe Route and never reaches the offer.

Total clicks

0

To the offer

0

To Safe Route

0

Filtered out

0%

What is inside

Not a list of checkboxes

Every setting on this page genuinely changes the route. There are no switches here that look meaningful and do nothing.

Safe Route

A guaranteed landing

Anything that fails the checks goes to a safe address. Whatever happens on our side, the visitor always gets a page — a blank screen is not one of the outcomes.

302 redirectmeta refreshproxy fetch404

Click log

A reason for every click

Not just "blocked", but which rule fired and at which step. You can see why a specific click went where it did.

IP

Ranges and feeds

Your own address lists plus ready-made data centre lists that update themselves. IPv4 and IPv6.

Flows

Splits and caps

Several destinations inside one campaign: priority, share of traffic for each and a daily ceiling.

Accounts

Data isolation

Account data is fully separated. Someone else's campaign is not visible in the list, nor through a direct link.

Your own domain

Traffic never leaves for a foreign address

The integration script lives on your site and asks for the verdict itself, passing visitor data signed with the campaign key. The visitor stays on your domain — their browser never contacts us.

A shared domain is the weak spot of filtering services: one customer's ban hurts everyone on it. Here the domain is yours, and you share its reputation with no one.

visitor request

your-domain.com  200

└ server asks for the verdict

   and serves the right page

the visitor's browser sees

your domain only

Ad platforms

Facebook, TikTok, Google Ads

The service is not tied to one platform: it inspects every click, wherever it came from. For the three largest ones the dashboard builds the tagged link for you, and the click ID — the mark of a real click on an ad — is recognised across all 10 platforms.

Facebook Ads

A ready set of campaign, ad set and ad tags. Facebook and Instagram.

TikTok Ads

A ready set of tags, plus blocking of reviewers that come from networks owned by the platform.

Google Ads

ValueTrack tags: campaign, ad group, creative, keyword, placement.

Click ID recognised here as well

  • Microsoft Ads msclkid
  • Yandex Direct yclid
  • X (Twitter) Ads twclid
  • LinkedIn Ads li_fat_id
  • Pinterest Ads epik
  • Reddit Ads rdt_cid
  • Snapchat Ads sccid

The click ID separates a real click on an ad from a direct visit: reviewers and scrapers open the link without it.

Pricing

Pay for volume

Every plan has the same features. The larger the volume, the cheaper the click.

Start

One or two sources and a predictable volume.

$39

per month

$0.098 / 1,000 clicks

Choose
  • 4 campaigns, up to 5 flows in each
  • Team workspace
  • 400,000 clicks per month
  • Facebook, TikTok, Google Ads and 7 platforms
  • Filters: geo, device, browser, time
  • Bot detection and Safe Route
  • Split tests, priorities, daily caps
  • Click log: 14 days
  • Your own IP lists: up to 10,000 rows
  • Automatic import of external lists
  • Snippet integration
  • Priority support

Business

Large volumes and a long history.

$129

per month

$0.052 / 1,000 clicks

Choose
  • 18 campaigns, up to 12 flows in each
  • Team of up to 5 seats
  • 2,500,000 clicks per month
  • Facebook, TikTok, Google Ads and 7 platforms
  • Filters: geo, device, browser, time
  • Bot detection and Safe Route
  • Split tests, priorities, daily caps
  • Click log: 30 days
  • Your own IP lists: up to 500,000 rows
  • Automatic import of external lists
  • Snippet integration
  • Priority support

Scale

Several teams sharing one stream.

$249

per month

$0.042 / 1,000 clicks

Choose
  • 100 campaigns, up to 20 flows in each
  • Team of up to 15 seats
  • 6,000,000 clicks per month
  • Facebook, TikTok, Google Ads and 7 platforms
  • Filters: geo, device, browser, time
  • Bot detection and Safe Route
  • Split tests, priorities, daily caps
  • Click log: 45 days
  • Your own IP lists: up to 1,000,000 rows
  • Automatic import of external lists
  • Snippet integration
  • Priority support
Cheapest per click

Maximum

The largest volume a single installation takes.

$499

per month

$0.033 / 1,000 clicks

Choose
  • Unlimited campaigns and flows
  • Team with unlimited seats
  • 15,000,000 clicks per month
  • Facebook, TikTok, Google Ads and 7 platforms
  • Filters: geo, device, browser, time
  • Bot detection and Safe Route
  • Split tests, priorities, daily caps
  • Click log: 45 days
  • Your own IP lists: up to 2,000,000 rows
  • Automatic import of external lists
  • Snippet integration
  • Priority support

There is no free plan and no trial. Once the volume runs out, campaigns keep responding but traffic goes to the Safe Route — clicks you have already paid for are never cut off mid-flight.

Set up your first campaign