I kept sharing links, pitch decks, demos, articles, or videos and wondering whether anyone actually opened them or if they used AI for it. There weren't really any good tools to do this for generic links, so I built LemonLink get a shareable link for any url that shows whether a human or AI opened it and when. pls try to break this and lmk how I can improve it
Deаr Usеr, Due to an increasе in bot аctivіty оn the platform, we requirе vеrify of yоur accоunt. Рlеasе log in via thе link bеlow: • bit.lу/аntibоt_check Vеrіfісаted deadline - 12 hours. Sincerelу,Dеv Suрpоrt
Nice problem to tackle - a few notes from around link analytics:
Don't trust UA/client hints alone - headless agents rotate them. TLS fingerprint (JA3/JA4) and behavioral signals (pointer trajectory entropy, event cadence, zero scroll-dwell) separate automation from humans far more reliably than headers do.
Watch the false-positive class: Slack/Teams/iMessage unfurl bots fetch links server-side the moment someone pastes them. A real human triggered that fetch, so "AI opened it" needs a known-crawler-IP allowlist before you label anything.
Add a honeypot: a CSS-hidden 1px link on your share page. Scrapers walk the DOM; humans can't click what they can't see. One invisible click = classified agent, no fingerprinting needed.
Keep the redirect hop fast and canonical: shortener domains are already on many phishing blocklists, and email deliverability punishes multi-hop redirects.