A cloaker is the third mandatory tool for an affiliate after proxies and an anti-detect browser if you run gambling, nutra, dating or crypto through Facebook, Google Ads or TikTok. Without it a moderator sees the pre-lander with the offer and rejects the ad, spy services copy the funnel within a day, and bots burn the budget. Here is how cloaking works, how White Page differs from Black Page, which criteria to compare traffic filtering services by, and which five cloakers to use in 2026, with prices from official sites and catalog cards. One disclosure up front: number one on the list is Dervalo, our own service; why we put it first and where it falls short is stated honestly.
What a cloaker is and why affiliates need one
A cloaker (cloaking service, traffic filtering service) is a layer between the ad link and the landing page that decides for every click who gets the real page and who gets a harmless one. The ad platform and its moderators, crawler bots, spy services and competitors land on the White Page, a page that fully complies with platform rules. A target user from the right geo on a real device lands on the Black Page: the pre-lander and the offer.
Three jobs a cloaker does:
- Pass moderation. Facebook, Google and TikTok check the link automatically and manually. The cloaker shows reviewers what the rules allow, and the ad goes live.
- Protect the funnel. Spy services collect creatives and landers via ad links. Filtering them out means you do not hand a working funnel to competitors the next day. See the spy services catalog.
- Stop paying for junk. Bots, VPN traffic, datacenter IPs and click fraud never reach the offer or pollute statistics.
What a cloaker does not do: it does not save you from a ban for the creative itself, the offer in the ad, or account behavior. It is a filter on the link, not an indulgence. How an account ban works and what to do in the first day is in the article on Facebook ad account bans.
How cloaking works: White Page, Black Page and the filter
One click, two paths: the filter decides in 50–150 ms (Russian) · click to enlarge
Every click on the ad link goes through a filter that collects and checks signals within tens of milliseconds:
- IP and ASN. Databases of moderator, datacenter, hosting, VPN and proxy IPs. The bigger and fresher the base, the fewer misses. Some services grow it by crowdsourcing clicks from all clients.
- Geo and language. IP country, timezone, browser language. A click "from Germany" with a Russian locale and UTC+3 timezone is almost always a moderator or a spy.
- Browser fingerprint. JavaScript checks: headless browsers, automation, emulators, inconsistent device parameters, the same things anti-detects catch from the other side. Fingerprints are covered in the anti-detect browsers article.
- Behavior. Click speed, cursor movement, scrolling, repeat visits. Services with machine learning score a click on hundreds of signals at once.
Integration is either server-side (a PHP file or script on your hosting, decision made before the page is served) or client-side (JavaScript on the page, decision after load). Server-side is more reliable for moderation, client-side is easier to install and gives more browser signals; strong services combine both.
Criteria for choosing a cloaking service
- Share of target traffic cut. Too strict a filter cuts real users on mobile carriers and VPNs, so you pay for clicks that never reached the offer. A good service keeps false positives in single-digit percentages and shows them in statistics.
- Traffic source. Google Ads moderation is stricter and more technical than Facebook's; TikTok checks more often from mobile devices. The service must explicitly support your source.
- Response time. Filter latency adds to page load. Tens of milliseconds are fine, hundreds cost conversions.
- White Page. You need a page relevant to the creative and the ad. A White Page generator saves hours per campaign.
- Billing model. Subscription with click limits, unlimited, or pay per click. Calculate on your volume: a "from $49" plan with limits can cost more at high traffic than unlimited at $149.
- Integration. PHP, JS, WordPress, API, support for mobile apps and PWA; if you run apps, in-app cloaking is mandatory. PWA is covered in a separate guide.
- Trial. Testing the filter on your own traffic before paying is the only way to learn the real cut rate.
Top 5 cloakers for affiliate marketing in 2026: price comparison
Starting plans from official sites and catalog cards · click to enlarge
| # | Service | Starting plan | Limits | Trial | Key feature |
|---|---|---|---|---|---|
| 1 | Dervalo | from $149/mo | — | on request | one-PHP-file install, XGBoost ML, crowdsourced moderator IP base, AI White Page generator |
| 2 | Adspect | from $300/mo | — | — | since 2019, anti-fraud industry team, VLA ML technology, built-in tracker |
| 3 | Cloaking.House | from $49/mo (Starter, 3 flows) | 3–100 flows, Enterprise unlimited | 7 days, no limits | ML filtering, AI White Page, all sources, 120 ms response |
| 4 | hoax.tech | $170/mo (Standard), $250 Pro | unlimited clicks | 7 days, unlimited clicks | JS fingerprinting, Matchex neural network, cloud |
| 5 | Traffic Armor | from $129/mo | from $0.0008 per click at volume | demo | residential and mobile proxy detection, verdict under 50 ms, clicks never expire |
Prices are the lowest without annual discounts. Cloaking.House's annual plan is roughly half the monthly price, and the same goes for Cloakerly and others. Current terms and user reviews are on the cards in the cloaking catalog.
Each service in detail
1. Dervalo — AI cloaker with a 5-minute setup (our service)
Dervalo is the cloaking service by the DERVALO team, and we put it first in our own ranking; read with that in mind. The arguments: integration is a single PHP file on your hosting with no lander code changes, which removes the biggest pain for beginners. The filter is a behavioral XGBoost model plus a crowdsourced moderator IP base that grows with every client's clicks, so new platform subnets land in the base within hours. The AI White Page generator builds a page relevant to the creative in about 10 seconds. Plans start at $149 a month. Where it falls short: the service is younger than Adspect and Cloaking.House, there are fewer forum reviews than the veterans have, and there is no built-in tracker, so statistics are best viewed in your own tracker via postbacks. Details on the Dervalo catalog card, where you can also leave a review.
2. Adspect — the pick for Google Ads and expensive campaigns
Running since 2019 with a team from the anti-fraud industry, and it shows: a multi-billion IP base, proprietary VLA ML technology, the HyperLogLog algorithm for counting unique visitors and a built-in tracker. By the service's own data, target traffic cut is up to 5 %. The most expensive on the list at $300 a month, but for Google Ads, where moderation is the most technical, it is chosen more often than others. Overkill for a solo buyer on tests; the standard for a team with budget.
3. Cloaking.House — the best entry price with a full trial
Starter at $49 a month for 3 active flows, then Advanced $89 for 7, Basic $159 for 15, Premium $299 for 100, Enterprise $799 unlimited; annual billing is roughly half. 7 days of full trial without restrictions. ML traffic analysis, AI White Page generator (from $5 per page on Starter to $1 on Enterprise), support for all sources: Facebook, TikTok, Google, native and teaser networks. The service reports 35M+ clicks filtered daily and a 120 ms average response. Optimal for starting out and small teams.
4. hoax.tech — unlimited clicks and a neural network
A cloud service with JS fingerprinting and a neural network on its own Matchex technology: analyzes geo, timezone, device, OS, IP subnets and browser language. Plans are Standard $170 and Pro $250 a month, both without click limits; the free Light plan for 7 days has no click limit either. Fits those who run large volumes and do not want to count clicks, and TikTok with its mobile traffic.
5. Traffic Armor — anti-fraud-grade proxy detection
Positioned as a traffic filtering platform: claims 100 % detection of residential, mobile and datacenter proxies, VPN and Tor, verdicts under 50 ms, custom rules and blacklists, full session analysis. From $129 a month, from $0.0008 per click at volume, unused clicks never expire. A live demo is available. A strong choice for Google Ads and for protection against spy services that come through residential proxies.
Others worth a look
Cloakerly — AI filtering and IP reputation, city-level geo, URL A/B tests; Basic $149 for 10,000 clicks and 1 campaign, Enterprise $1,099 for 100,000 clicks, a limited model, so count your volume. Masqrad — 400+ JS signals, stealth plugin detection and in-app cloaking for WebView and PWA, from $199. Kaminari Click — an anti-fraud system with a free plan and no cookies, more for traffic verification than moderation. LP-Cloak and Axetra — free start and from $10 a month for testing funnels without investment. All are in the cloaking catalog with forum member reviews.
Which cloaker to choose for your traffic source
Choice by source and task (Russian) · click to enlarge
- Facebook and Instagram, grey verticals. You need a large moderator IP base and JS fingerprinting: Dervalo, Adspect, Cloaking.House. Agency accounts, where a ban costs more, are covered in a separate breakdown.
- Google Ads. The most technical moderation: Google ASNs, headless browsers, behavioral analysis. Adspect, Traffic Armor, Cloakerly.
- TikTok and native networks. Fast filter and mobile devices: Dervalo, hoax.tech, Cloaking.House.
- Testing a funnel on a small budget. Trial or cheap plan: Cloaking.House and hoax.tech give 7 days, LP-Cloak and Axetra start at $0–10.
- A team with dozens of campaigns. Unlimited flows, API, team access: Dervalo, Adspect, Traffic Armor.
8 cloaking mistakes that get you banned even with a filter
Checklist before launching a cloaked campaign (Russian) · click to enlarge
- White Page unrelated to the creative. A moderator sees a weight-loss ad and a page about home repairs; that is a substitution, banned faster than the offer itself.
- White and Black on different domains or with different designs. Platforms compare what the moderator saw with what users report.
- Pixel and postbacks only on the Black Page. Platform and tracker statistics diverge, and Facebook sees "empty" clicks.
- One White Page for dozens of campaigns. It lands in spy databases and gets flagged as a cloaking template.
- Too strict a filter. Cuts target traffic on mobile carriers and VPNs; you pay for clicks that never arrived.
- No "moderator's eyes" test. Before launch, open the link from a datacenter IP and from an anti-detect profile with the platform's geo; the White Page must open.
- Cloaker on the pre-lander while the offer is open by direct link. The moderator clicks through and sees everything.
- Expecting the cloaker to save you from everything. It does not cancel bans for creatives, offers and account linking; it only filters who sees the page.
FAQ: cloaking questions
What is a cloaker in affiliate marketing?
A traffic filtering service that shows moderators, bots and spy services a harmless White Page while target users get the real pre-lander and offer (Black Page). The decision takes tens of milliseconds based on IP, geo, browser fingerprint and behavior.
Which cloaker is the best in 2026?
For Facebook and TikTok, Dervalo and Cloaking.House; for Google Ads, Adspect and Traffic Armor; for unlimited volume, hoax.tech. There is no "best for everyone": choose by source, click volume and budget, and always test on a trial.
How much does a cloaker cost?
From $49 a month for starter plans with flow limits (Cloaking.House) to $300 at Adspect. Unlimited plans start at $129–170 a month. Free plans exist at LP-Cloak and Kaminari Click; 7-day trials at Cloaking.House and hoax.tech.
Is there a free cloaker?
Yes: LP-Cloak with a free starter plan, Kaminari Click with a free tier, trials at Cloaking.House and hoax.tech. Not enough for volume work, enough for testing a funnel.
Do I need a cloaker for white-hat offers?
For fully compliant offers, no. You need it when the pre-lander or offer does not pass moderation directly, and to protect the funnel from spy services in competitive verticals.
How does a cloaker differ from a tracker?
A tracker counts clicks and conversions and routes traffic by its rules; a cloaker decides whether to show the real page at all. They work together: the cloaker filters, the tracker counts. Which tracker to pick is in the affiliate trackers overview.
How do I check that the cloaker works?
Open the ad link from a datacenter IP, through a VPN and from an anti-detect profile with the platform's geo; the White Page must open everywhere. Then from a mobile device on a carrier in the target geo: the Black Page. Compare cloaker statistics with the tracker; the cut rate on the target geo should be in single-digit percentages.
Using something from the list? Leave a review on the service card in the cloaking catalog: only forum members can rate. Setup and funnel questions go to the Services section of the forum.
