Articles on: CAMPAIGN CREATION

How to Set Up a Shadow Campaign in The White Rabbit

The White Rabbit (TWR) Shadow campaign installs protection directly on your hosting via script, without generating an external link. It is ideal for sensitive traffic sources and ensures that bots and competitor spy tools receive the safe page, while qualified traffic reaches your offer.

Before you begin

You need a domain registered in TWR with the CNAME record configured. See the article How to Register a Domain in The White Rabbit (Complete Step-by-Step) if you haven't done this yet.

Step by step

1. Open the dashboard and create a new campaign

In the side menu, click Campaigns and then Create.

2. Fill in the name and select the domain

Enter a name of your choice to identify the campaign and select the domain registered in TWR.

3. Select the traffic source

Under Traffic Source, choose the platform where you will run your ads. Some sources only support the Shadow method; others let you choose between Shadow and the Standard method.

4. Enter the safe page URL

Under Safe Page, paste the URL of the page that will be shown to bots and spy tools.

Build this page on the same domain you registered in TWR. You will need two DNS records: a CNAME pointing the subdomain to TWR, and another record pointing to your hosting IP. If you are unsure, contact your hosting provider's support.

5. Enter the offer page URL

Under Offer Page, paste the URL of the page that will be shown to qualified traffic.

Recommended: keep the offer page on a different domain from the one registered in TWR.

6. Configure countries and devices

Under countries and devices, select the targeting that matches your ad campaign.

Under Advanced Options, enable Unique Token when available. It generates a custom token alongside the campaign parameters, adding an extra layer of protection.

7. Save the campaign and copy the script and parameters

Click Save. TWR will generate the Shadow script and the campaign parameters.

Do not share the script or parameters via WhatsApp, Notion, or any other service that may alter characters. Even small changes will break the script. Use only a plain-text notepad to copy and paste these values.

8. Install the script on your hosting

The script must be installed on a blank page with no other files in the same folder. To install it on the same hosting as your safe page:

Open your hosting file manager and go to your site's public folder.
Create a new subfolder (e.g., home) and move all safe page files into it. The safe page will then be accessed via the URL with that path (e.g., yourdomain.com/home).
In the root of the public folder, create a new file named index.php.
Paste the Shadow script into index.php and save.

The script must be the only file in the folder where it is installed. Other files in the same folder may prevent the script from rendering correctly.

9. Add the script URL and parameters to your ad

The ad URL is the root URL where the script was installed (e.g., yourdomain.com). Combine it with the parameters generated by TWR based on your traffic source:

Scenario	How to insert
Source with a separate field for parameters	Clean URL in the URL field + parameters in the platform's dedicated field
Source without a separate field for parameters	`URL?parameters` — add `?` after the URL and paste the parameters right after

To include tracking parameters from your analytics tool alongside TWR's parameters, add & after TWR's parameters and paste your tracking parameters right after.

Frequently asked questions

1. Can the Shadow script be installed on the same hosting as the safe page?

Yes, and that is the recommended setup. What matters is that the script is the only file in its folder, with nothing else alongside it.

2. Which traffic sources support the Shadow method?

The Shadow method is available for Google, Kwai, MediaGO, Newsbreak, Taboola, and TikTok. Some of these sources only offer Shadow; others let you choose between Shadow and the Standard method. Check the available options when selecting the traffic source in the dashboard.

3. What happens if I change the DNS settings of the domain registered in TWR?

The script will stop working. The domain registered in TWR must always point to the service. Do not change the CNAME record after it has been verified.

4. Does the Shadow script need to be the only file in the folder?

Yes. Other files in the same folder where the script is installed may prevent it from rendering correctly. Keep the script isolated.

Updated on: 30/04/2026

Was this article helpful?

Thank you!