01
Cloudflare connected via API
Add the API token of your free Cloudflare account — the platform creates the zone, DNS records and HTTPS for every domain of yours.
createlink.link®
Self-hosted URL shortener with an Anti-Bot filter. Smart traffic redirection and landing page protection on your own VPS — no monthly subscription.
No card
Built-in Anti-Bot filter
The flow
How it's set up
Six links in the chain — from your own domain and server to ready analytics
02
The agent on your own VPS
Your own clean VPS (we recommend Contabo) runs an isolated Docker agent that handles the clicks. Your server, your IP.
03
Domain checks and rotation
Add your domains (three or more works best). The platform checks their reputation and rotates them for you during bulk link generation.
04
One-time links: three clicks
Every link is personal and lives for exactly three clicks by real people. Bots are sent to a neutral page by the built-in Anti-Bot filter.
05
Bulk link generation
One target URL, and the system returns an array of personal links: up to 25,000 at a time, spread evenly across your domains, with CSV export.
06
Campaign analytics
A three-stage funnel: the email open, the click by a live person and the conversion — with affiliate revenue next to it via S2S postback.
Use cases
Who this is built for
The three jobs the platform fits best
Email campaigns to large lists
Every recipient gets their own link, so the stats show who opened the email and who clicked. A batch of up to 25,000 links is spread across your domains, so neither the load nor the mail filters' attention piles up on a single name.
The finished list exports to CSV — straight into your mailing software.
Personal messages in messengers
The same works for Telegram and WhatsApp when you message each person individually — not a group or a channel: every recipient gets a separate link. Messenger scanners get a safe page, and those hits do not consume the clicks.
Personal messages only — not for groups or channels: a link lives for three clicks.
SMS messages
A short link on your own domain does not eat into the SMS length, and every recipient gets their own — so you can see exactly who clicked. Automated link checks get a safe page and do not consume the clicks.
SMS opens are not tracked — the stats show clicks. The list exports to CSV for your SMS service.
Under the hood
Key Features
Everything you need for professional link management
Isolated self-hosted infrastructure
Clicks are served by your own server, never a shared one: your VPS, your IP address, your Cloudflare account. Your traffic never mixes with anyone else's, so the reputation of your domain and server depends on you alone.
Real-time Analytics
Every click is broken down by country, device, browser and traffic source. See where and when your target audience arrives, instantly.
S2S Postback synchronisation
End-to-end wiring with affiliate and CPA networks: the network reports the payout to your own domain, and the platform ties it to the exact link. Revenue sits next to traffic, so ROI is counted without exporting anything into spreadsheets.
Domain Reputation Checks
Every domain is checked automatically against dozens of phishing databases (Google Safe Browsing, VirusTotal, DNSBL). Compromised addresses are detected by the system on their own.
Cloudflare Shield Protection
Your server stays safely hidden behind Cloudflare. The real IP address is never exposed, and traffic goes through protected proxies with free SSL encryption on every domain.
Smart Anti-Bot Filter
A built-in system for safe traffic routing. Automated bots, parsers and monitoring systems are quietly sent to a fallback page, while real users get instant access to your content.
Destination screening
Every destination URL is screened against threat databases — Google Safe Browsing, VirusTotal and PhishTank — when the link is created and weekly after that. The reason is simple: your links run on YOUR domain, so phishing or malware on the offer side hits your reputation and your email deliverability first. A destination flagged as dangerous gets no links.
- Spamhaus DBL / SURBL Whether the page domain is already on spam and phishing lists
- Google Safe Browsing Google's database: malware, phishing, unsafe pages
- VirusTotal A combined verdict from dozens of antivirus engines
- PhishTank Community database of confirmed phishing pages
Traffic protection
Anti-Bot filter: three lines before the redirect
The decision is made BEFORE the visit is forwarded, on your own server. A live person reaches the destination page; automation gets a neutral one. No captcha and no required JavaScript.
01
Request headers
An empty or truncated User-Agent, a missing browser language, known robots by list. And the "browser that is not a browser": a request claiming a modern Chrome while carrying none of the headers a real Chrome always sends. The cheapest line runs first, because a live person is waiting for the redirect.
02
Reverse DNS, forward-confirmed
Search crawlers and SEO scanners identify themselves through the network's reverse name — and that name is verified the other way round, through the forward record. A forged "Googlebot" does not pass: anyone can publish a name, only its real owner can confirm it.
03
The visitor's network
A browser coming from a datacenter is not a person. We check the network against an autonomous-system database: hosting, clouds and server proxies never receive the destination page, however flawless the browser looks. The database lives on the platform and is updated there, so your server needs no reconfiguration.
A blocked bot does not spend a personal link's limit — all three opens stay for live people.
Every block appears in your stats, in the "Humans vs bots" block: the protection proves itself with a number, not a promise.
The visitor does not have to do anything: no captchas, no "I am not a robot" challenges — the filter decides on its own, before the visit is forwarded.
Dashboard
See it from the inside
The four screens you will use every day: your dashboard with the balance, domain settings, creating links and reading the stats. Click a screenshot to open it in full.
Open full size
Dashboard — package and balance at a glance
- Two separate numbers: links left in your package and euros on your account.
- Once the package runs out, new links are paid from the account at the beyond-package price. Neither links nor money ever expire.
- Top up with crypto — USDT, BTC, ETH and 350+ other coins; payment history in one click.
Open full size
Settings — domains, agent and Cloudflare
- Four steps in order: a Cloudflare token, the agent on your VPS with a single command, a domain, DNS verification.
- Every domain is checked against Google Safe Browsing, VirusTotal, Spamhaus and DNS automatically — and again every 6 hours.
- The Cloudflare shield hides your server IP, and how many domains to connect is up to you.
Open full size
Links — thousands per request
- Up to 25,000 personal links per request, exported straight to CSV for your mailing.
- Every code has a visit limit (three by default): a spent code no longer reaches the offer, so a leaked link is worthless.
- One link works on all your connected domains, and the email button is built in one click.
Open full size
Statistics — the whole funnel on one screen
- Humans and bots are counted separately, so you see exactly what the Anti-Bot filter stopped.
- A funnel from email open to click and conversion; revenue arrives via your affiliate network postback.
- Traffic by domain and campaign, hourly distribution in your time zone, countries, devices and browsers.
Screenshots are from a demo account; names, domains and URLs in them are illustrative.
Before you pay
What you prepare yourself
Three things you provide on your side. Without them the platform will not run — make sure you can do them before you pay.
Your own server (VPS)
A clean Ubuntu 22.04 or 24.04, 1–2 vCPU and 2 GB of memory. The agent installs with a single command — we never ask for your server password. Your server handles the redirects, not ours.
Your own domain
Links point at your domain, not ours — which is why the traffic reputation is yours. For large volumes we suggest three domains or more, so the load is not concentrated on one name.
A Cloudflare account
The free plan is enough. You provide an API token with three permissions, and the platform sets up the zone, DNS and TLS itself — inside your own account.
Payment is made in cryptocurrency and access opens immediately, so payments are final and no refunds are provided. Make sure all three points are within your reach first.
Lifetime packages
Pricing Plan
Pay for volume — a prepaid package of links, no subscription. Links beyond the package come from your balance at your package rate.
no expiry
No monthly subscription
Starter
€25
5,000 links in the package
Then €0.005 / link
Test the software on a small base
Choose planPro
€79
50,000 links in the package
Then €0.0016 / link
Steady volume — mailings of 3,000+ links
Choose planAdvanced
€149
200,000 links in the package
Then €0.00075 / link
Large volumes every day
Choose planVIP
€249
500,000 links in the package
Then €0.0005 / link
Hundreds of thousands of redirects
Choose planIncluded in every package — only the volume differs
- Your domain behind Cloudflare — zone, DNS and TLS configured automatically, in your own account
- The agent runs on your VPS — traffic leaves from your IP, not a shared one
- Built-in Anti-Bot filter — bots get a safe page, a human goes where intended
- Automatic IP and domain reputation checks every 6 hours: 8 DNSBLs, Google Safe Browsing, VirusTotal, AbuseIPDB
- One address does two jobs — both the click and the email open
- S2S postback from your affiliate network — revenue sits next to traffic
- Stats for the selected period: geo, devices, browsers, world map, funnel
- Bulk generation of personal links — up to 25,000 at once, with CSV export
Every link is personal: one recipient, up to 3 clicks — after that it closes itself. Links never expire: you buy volume, not a month.
Transparent Pricing
No hidden fees. Prices in euro, paid in crypto. Neither links nor money on your account ever expire — nothing is lost. Beyond the package, links come from your balance at your package rate. No subscriptions, no auto-charges: campaigns come in waves, and during a pause you pay nothing — the remainder simply waits for your next launch.
Secure crypto payments via NOWPayments
Architecture
Why your own infrastructure
Most trackers and shorteners run on shared servers: dozens of clients share the same IPs and domains. The moment one of them runs aggressive campaigns, mail filters block the whole pool — and your deliverability along with it. That is what people call a neighbour ban. We do not have one for a simple reason: there is no shared pool.
Your server is only yours
Clicks are served by the agent on your VPS, not by our servers. There are no co-tenants, so somebody else's campaign cannot touch your domains.
The real server IP stays hidden
Your domains sit behind Cloudflare in your own account: from the outside only the proxies are visible. You own the zone — and can disconnect a domain yourself at any time.
A link does not travel further
A personal code accepts three clicks from live people and serves scanners a safe page. That keeps the domain usable for delivery longer.
What sits where — no illusions
The agent on your VPS keeps no database: codes, stats and revenue are counted by the platform, which also drives the shield. On your side are the traffic, the domains and the reputation — exactly what needs to be isolated.
Get started
Ready to start?
Signing up takes a minute, but the account does nothing on its own: the platform runs only on your infrastructure — your VPS, your domain, your Cloudflare. Connect them and pay only for the links you create.
Create your first linkNo card · Your own VPS and domain required
