Cloaking is one of the most discussed and controversial topics in traffic arbitrage. The essence of the technology is simple: the moderator of the advertising platform sees one page (safe, compliant with the rules), and the real user sees another (with offers that the moderation would not miss). In 2026, cloaking remains an integral part of the mix of most affiliate marketers working with nutra, gambling and crypto - despite the fact that advertising platforms are monthly improving their detection methods. In this article, we will look at how cloaking works technically, what types and services exist, how it is detected, and why cloaking alone is not enough for stable operation—you need protection at the content level.
The material is for informational purposes only. We describe the technology, principles of operation and place in the arbitrage ecosystem - but do not call for violating the rules of advertising platforms or legislation. Each affiliate marketer independently assesses legal and ethical risks.
What is cloaking and why does an affiliate marketer need it
Cloaking (from the English cloak - mask, hide) is a technology in which the same URL shows different content depending on who opens it. If the visitor is a moderator of Facebook, Google or TikTok Ads, he sees a “white” page: an article about a healthy lifestyle, a review of an application, news material. If the visitor is a real user who clicks on an advertisement, he is taken to an offer: nutra product, casino, crypto exchange, dating application.
Why is this needed? The answer lies in the economics of arbitrage. Most high-margin verticals - nutra, gambling, crypto, adult dating - are prohibited or strictly limited in the rules of advertising platforms. At the same time, CPA networks offer $20–150+ per conversion for leads in these verticals. Without cloaking, an advertising account with such an offer is blocked after the first manual review by a moderator - often within minutes.
Cloaking solves a specific problem: it allows an advertisement to pass moderation and start receiving traffic. Then the whole chain comes into play: tracker, pre-landing, landing, offer. But without the first step—passing moderation—the rest is meaningless.
It is important to understand: cloaking protects the landing page - what the moderator sees when checking the advertisement. But this is only one level of protection. If you work with organic free traffic (UBT) or flow through a network of accounts, you need a second level - content protection. More about this in the section on the connection between cloaking and uniquization.
Types of cloaking: JS, server and hybrid
Technically, cloaking is implemented in three main ways. Each has its own advantages, disadvantages and application scenarios. The choice depends on the advertising platform, budget and level of technical training.
JS-cloaking (client)
The simplest and most affordable option. JavaScript code is embedded on the “white” page, which checks the visitor’s parameters directly in the browser: User-Agent, screen resolution, installed plugins, language, time zone, presence of WebDriver flags (a sign of an automated browser). If the script identifies the visitor as “safe,” a JavaScript redirect to the offer occurs. If not, the visitor remains on the white page.
Advantages: minimum entry threshold, does not require server infrastructure, works on any hosting, easy to install - just paste the code into HTML. Most ready-made solutions (CloakIt, IM KLO) offer the JS option as a base one.
Disadvantages: cloaking code is visible in the page sources. An advanced moderator or automated scanner can detect suspicious JavaScript. In addition, JS cloaking is useless against server-side checks - when the site loads your page with a server-side renderer without executing JavaScript (headless browser with JS disabled).
Where it works: Facebook Ads (if properly configured), native advertising, push networks. It works worse with Google Ads, where moderation uses deep analysis. Not suitable for TikTok Ads, where checking often occurs at the server level.
Server cloaking
Filtering occurs on the server side before the HTML code is sent. The server analyzes the visitor's IP address, HTTP headers, referrer, ISP and compares them with databases of IP addresses of advertising platforms, data centers, VPN providers and known moderator subnets. The decision - to show a white page or an offer - is made before the browser even receives a byte of content.
Advantages: there are no suspicious scripts in the source code of the page - the moderator receives pure HTML of a white page. Works even with JavaScript disabled. Server-side filtering is much more difficult to detect by automated scanners.
Disadvantages: requires its own server (VPS), technical configuration skills, and regular updating of IP address databases. More expensive and more difficult to support. If the IP database is outdated, let the moderator through to the offer, and the account will be banned.
Where it works: Google Ads, TikTok Ads, Facebook Ads - all major platforms. Server cloaking is a standard for working with strictly moderated sites and large budgets.
Hybrid cloaking
Combination of server and client filtering. The first level is where the server checks the IP and HTTP headers. The second level - JavaScript on the page additionally checks the behavior and fingerprint of the browser. Only if both levels “missed” the visitor, a redirect to the offer occurs.
Advantages: maximum filtration accuracy. Double checking minimizes the likelihood that the moderator will get into the offer. Even if the moderator’s IP is not in the database (for example, he uses a resident proxy), the JS level can cut him off based on behavioral patterns.
Disadvantages: complex setup, higher latency when loading the page (two levels of verification = more time), requires constant monitoring of both levels. Irrational for small volumes of traffic.
Where it works: wherever server cloaking works. Used for large budgets ($500+/day) and working with verticals with the strictest moderation (crypto, gambling in Tier-1 geo).
Popular services and solutions for cloaking
The market for cloaking solutions in 2026 will be divided into two types: built-in tracker modules and standalone services. Let's look at the key solutions used by arbitrage traders.
Keitaro (built-in cloaking)
Keitaro - the most popular tracker in CIS arbitrage - has a built-in traffic filtering module. Filters by IP databases (MaxMind, IP2Location), User-Agent, referrer, ISP, device, OS. Advantage: cloaking and tracking in one system, single dashboard, no need to integrate third-party services. Setting up the “white → offer” flow is done through the standard campaign interface. For most affiliate marketers, Keitaro closes both analytics and cloaking at the same time.
Binom (built-in cloaking)
Binom is a self-hosted tracker that processes clicks on its own server. Built-in filtering works similarly to Keitaro: IP bases, headers, basic routing rules. The advantage of Binom is speed: its own server processes a redirect in 3–5 ms, which is critical for conversion. The built-in cloaking is sufficient for simple connections, but for serious work with Facebook and Google it is recommended to use it in conjunction with a dedicated cloaking service.
CloakIt
Standalone is a service specializing exclusively in cloaking. The main advantage is our own, constantly updated database of IP addresses of moderators and advertising platform bots. CloakIt supports filtering by IP, User-Agent, ISP, referer, presence of WebDriver and a number of behavioral signals. Integrates with Keitaro, Binom and other trackers via redirect. Offers JS and server-side options. Cost: from $60/month.
IM KLO
Another specialized cloaking service with an emphasis on working with Facebook Ads. The key feature is deep filtering of Facebook crawlers and manual moderators. IM KLO analyzes not only IP and headers, but also transition patterns: time on page, scrolling speed, presence of cookies. Supports “training” based on blocked accounts - when banned, the service adds the characteristics of the moderator to the filtering database. Cost: from $80/month.
LeadRock Cloak
Cloaking solution from CPA network LeadRock. The advantage is integration with your own offers LeadRock: cloaking can be configured from the network interface, tracking and attribution work out of the box. For those who rely exclusively on offers, LeadRock is a convenient option that does not require third-party integrations. Limitation: tied to one CPA network.
How to choose a solution
The choice depends on the connection and budget:
- Beginner affiliate marketer, budget up to $100/day: built-in cloaking Keitaro. One tool covers both tracking and filtering. This is enough for push traffic, native, small volumes Facebook
- Mid-level, budget $100–500/day: Keitaro/Binom + CloakIt or IM KLO. Tracker for analytics, standalone cesspool for serious filtering
- Large volumes, budget $500+/day: hybrid setup - server cloaking on VPS + standalone service + own additional filtering scripts. Maximum reliability, but requires a technical team
Use scenarios by verticals
Cloaking is not a universal tool with one setting for all cases. Each vertical dictates its own requirements for white pages, filtering depth and redirect chain.
Nutra
The most popular vertical using cloaking. Facebook, Google and TikTok prohibit advertising of weight loss products with aggressive promises, before/after photos and medical claims. At the same time, nutra offers build conversions on this.
Typical scheme: moderator sees an article about healthy eating or a review of recipes → a real user lands on a pre-landing page with a weight loss story → then on an offer landing page. The white page should be relevant to the ad: if the ad is about food, the white page should be about food, not about cats.
Nuance: Facebook in 2026 checks not only the landing page, but also the chain of redirects. If there are 3+ redirects between an ad click and the final page, this in itself raises suspicions. Optimal: one server redirect, invisible to the user.
Gambling and Betting
Gambling is prohibited in advertising on most platforms (with the exception of licensed operators in specific geographies). Affiliate marketers use cloaking to target unlicensed casinos and bookmakers.
Typical scheme: the moderator sees a review of a mobile application or a financial article → the user is taken to the registration page of a casino or bookmaker. A white page is often designed as a review of a game or application - it looks relevant and arouses a minimum of suspicion.
Nuance: geo-filtering is critically important in gambling. Casino offers usually work for specific countries. Cloaking should cut off not only moderators, but also users from non-target geos - otherwise you pay for clicks that do not convert.
Crypto
Crypto offers are one of the most strictly moderated verticals. Google and Facebook almost completely prohibit advertising of cryptocurrencies (with the exception of certain licensed exchanges). Cloaking is required here for any volume.
Typical scheme: moderator sees an article about blockchain technology or a review of a fintech application → the user lands on a landing page of a crypto platform. White pages for crypto must be of especially high quality - moderation in this vertical is the most attentive.
UBT and cloaking: specifics
In organic free traffic (UBT) (shareware - TikTok, Reels, Shorts) cloaking is used differently than in paid advertising. There is no advertising account or ad moderation. But cloaking is needed to protect links in bio and pavement pages.
Typical scheme: the user goes from the bio TikTok profile → gets to an intermediate page with cloaking → if it is defined as “safe” - a redirect to the offer, if not - remains on a white page. This protects not from ad moderation (there is none), but from manual checks of the platform, which periodically scans links in the bio for violations.
Specifics of UBT: UBT links use chains of redirects - from the link in the bio through several intermediate domains to the offer. Cloaking is integrated at the level of the first or second redirect. Important: when working with a network of accounts, different groups of profiles must lead to different domains with cloaking - otherwise the same link in the bio becomes a signal for linking accounts.
Cloaking detection: how sites are found and banned
Advertising platforms are investing millions of dollars into cloaking detection. Understanding detection methods is key to assessing the true level of risk associated with this technology.
Detection methods in 2026
- Random revisions. The simplest method: the site re-enters the already approved URL hours, days or weeks after the initial moderation. If the content has changed - ban. Moreover, a repeat visit can occur from a different IP, without a referer and at a different time of day - moderators do not go the same way twice.
- Checking from residential IPs. Facebook and Google have not been checking only from corporate IPs for a long time. Moderators use residential proxies, mobile IPs, VPNs - the same addresses from which real users access. Filtering only by IP databases no longer protects 100%.
- Headless browsers with JS rendering. Platforms use full headless Chrome/Chromium to load pages, including executing JavaScript. This neutralizes primitive JS cloaking, which only checks for the presence of WebDriver. Advanced headless browsers mask WebDriver flags and emulate a real fingerprint.
- Behavioral analysis. The platform monitors anomalies in the traffic flow: if 100% of transitions from your ad have a bounce rate of 2% (that is, everyone moves on, no one remains on the “white” page) - this is suspicious. A real white page should have plausible behavior metrics.
- Comparison of advertising and landing page content. AI models in 2026 analyze the semantic correspondence between an advertisement and a landing page. If an advertisement promises to “lose weight in a week”, and the white page is about borscht recipes, the discrepancy will trigger a flag even before manual checking.
- Cross-reconciliation with reviews and complaints. Platforms analyze user complaints. If a user complains about advertising, and the moderator sees a “white” page when checking, this is direct confirmation of cloaking. One complaint can kill an account instantly.
How arbitrage traders adapt
Detection is improving - but bypass methods do not stand still. Key principles that increase ligament survivability:
- High-quality “white” pages. Not template one-pagers, but full-fledged sites with unique content, several pages, normal navigation. The more realistic the white page, the more difficult it is for the moderator (and the automation) to suspect cloaking.
- Regular updating of IP databases. Subscription to current moderator IP databases is a prerequisite. Databases from CloakIt and IM KLO are updated daily, which is critical for server filtering.
- Multi-layer filtering. Hybrid approach - server-side IP verification + JS fingerprint analysis + behavioral rules - provides maximum accuracy. Each additional layer of filtering cuts off moderators who have passed the previous one.
- Domain rotation. One domain should not last longer than 1-2 weeks with heavy traffic. Domains burn out and end up on blacklists of sites. Rotation of 5–10 domains prolongs the life of the ligament.
- Semantic Relevance. The white page should be thematically related to the advertisement. Advertising about health → white page about health. Not about finance, not about technology - AI models of sites are already catching inconsistencies.
Cloaking + uniquization: two levels of affiliate protection
Cloaking protects one level: landing page and offer. The moderator does not see where the user actually ends up. But in affiliate marketing in 2026 - especially when working with account networks and organic free traffic (UBT) - there is a second critical level that cloaking does not cover: content.
Imagine a combination: 30 advertising accounts in Facebook are pouring into one offer through cloaking. The landing page is protected - the moderator sees a white page. But all 30 accounts use the same creatives - the same videos in advertising. What's happening? Antifraud Facebook links accounts through identical content and bans the entire network - even if cloaking works perfectly.
The same thing in UBT: 50 accounts in TikTok upload the same video with a link in the bio to the cloaking page. Cloak filters moderators - but the platform links all accounts through content hashes of an identical video. The result is a ban on the entire network.
Cloaking protects the landing page. Uniqueness protects content. Both layers are required.
360° Uniquizer closes the content level of protection: from one source video it creates dozens of unique versions for each account. Each version differs from the original and from other versions in all parameters that the platforms check: perceptual hashes (pHash), audio fingerprint, neural network analysis, metadata. The platform sees different video files - there are no content links, accounts are not connected to each other.
Complete chain of protection when working with mesh:
- Level 1 - network: each account on its own IP (proxy), unique fingerprint (anti-detect)
- Level 2 - content: each account uploads a unique version of the video (360° Uniquizer)
- Level 3 — landing page: cloaking filters moderators on the offer page
Any level falls out - the grid lights up. A proxy without uniquization is a content bundle. Uniqueness without cloaking - ban for offer. Cloaking without uniquization - linking accounts through creatives. Only the full link works.
Linking with the tracker makes the system manageable: Keitaro or Binom records which account the traffic came from, through which cloaking domain, which version of the creative worked better. Analytics along the entire chain - from a unique video to conversion - allows you to scale working links and disable ineffective ones.
Practical example: complete bundle for nutra
- Create 5 initial video creatives for a nutra offer
- Unique each through 360° Uniquizer → 10 versions of each = 50 unique videos
- Distributed among 50 advertising accounts - each gets their own video
- Each account leads to a separate domain with server cloaking
- Cloaking domains route traffic through Keitaro: moderators see white pages, users see pre-landing and offer
- Keitaro records conversions for each account, domain and creative
Result: three levels of protection operate in parallel, each covering its own area of responsibility. Accounts live longer, the bundle scales predictably.
Ethics and legal side of cloaking
Cloaking is a topic that cannot be discussed without mentioning the legal and ethical aspects. The position of our blog is informational: we describe the technology and its application, but do not call for violation of laws or site rules.
Platform Rules. Facebook, Google, TikTok and all major platforms expressly prohibit cloaking in their advertising policies. Using cloaking to bypass moderation is a violation of ToS (Terms of Service). Consequence: ban of an advertising account, loss of budget, blocking of a business manager, in extreme cases - legal claims.
Legislation. In most jurisdictions, cloaking as a technology is not illegal - substitution of content according to conditions is used everywhere (A/B tests, geo-personalization, parsing protection). However, the use of cloaking to promote prohibited goods and services (unlicensed casinos, counterfeit medicines, financial pyramids) may fall under articles of fraud and false advertising.
Market reality. Despite the prohibitions, cloaking remains a standard tool in arbitrage of “gray” verticals. CPA-networks openly offer offers that do not undergo moderation without cloaking. Cloaking services operate legally and sell subscriptions. Affiliate marketing conferences discuss cloaking on official panels. This is an industrial reality that needs to be understood - regardless of personal position.
Recommendation: Assess the legal risks for your specific jurisdiction, vertical, and scale. Working with nutra (legal dietary supplements) through cloaking is one level of risk. Promoting an unlicensed casino in a prohibited market is completely different. The grayer the offer, the higher not only the margin, but also the legal consequences.
Cloaking protects the landing page, and 360° Uniquizer protects the content. When working with a network of accounts, cloaking alone is not enough: identical creatives link accounts at the content level, and the platform bans the entire network. 360° Uniquizer creates a unique version of each video for each account - different hashes, different audio, different metadata. There are no content links, accounts live longer, the link is scalable.
Try 360° Uniquizer - download the original video and get unique versions for the entire grid. Local, no cloud, no limits.