How to Set Up The White Rabbit Step by Step

The White Rabbit (TWR) is a traffic filter that protects ad campaigns against competitor spying and bots. In this guide you'll register a domain, create your first campaign, and apply the generated URL to your ad — all the configurations needed to start filtering traffic in minutes.

Before you start

• Have an active TWR account.
• Have a domain available to register, different from your offer page domain. Your offer page domain is exposed in your ad settings — it must remain isolated.

Step by step

1. Get to know the TWR dashboard

The dashboard shows the total clicks passing through TWR and where each request goes:

• Total Requests — total volume of clicks processed.
• Safe Page — clicks routed to the safe page (bots, spies).
• Offer Page — clicks routed to the offer page (qualified traffic).
• Bots — counted separately and not billed.

2. Register a domain in TWR

1. In the side menu, click Domains.
2. Click Create in the top right corner.
3. TWR generates an address pointer. Keep this tab open — you'll use this address in the next step.

3. Create the CNAME record in your DNS panel

In the DNS panel of the provider where you bought the domain (Hostinger, Cloudflare, etc.), add a new record:

Save the record.

4. Verify the domain in TWR

1. Go back to the TWR panel.
2. Enter the complete subdomain you just created (e.g., home.yourdomain.com).
3. Click Save and then Verify.

5. Create a new campaign

1. In the side menu, click Campaigns.
2. Click Create.
3. Fill in Name and, in Domain, select the domain you just verified.

6. Choose the traffic source

Available sources vary based on your subscription plan. TWR offers two campaign types:

7. Configure the safe page

In Safe Page, paste the URL of your safe page. It must:

• Comply with the ad platform's policies.
• Be consistent with the ad's theme — if the ad is about cars, the safe page can't be about bicycles (this raises suspicion).

8. Configure the offer page

In Offer Page, paste the URL of your offer page. No additional integration needed.

9. Choose the redirection method

TWR offers three methods, applicable to both the safe page and the offer page:

10. Set countries and devices

Select the countries and devices matching your ad's targeting.

• What's checked passes through the TWR filter.
• What's unchecked goes straight to the safe page, without filtering.

Example: if you uncheck Desktop, any desktop click goes straight to the safe page — even if it's a real customer.

11. Activate Unique Token

In advanced options, activate the Unique Token toggle. It works like a password added to the URL parameters of the campaign, increasing security. No additional configuration required.

12. Save and copy the URL and parameters

Click Save. TWR generates two deliverables you'll use in your ad:

• The campaign URL.
• The campaign parameters.

Keep both at hand — you'll paste them into the ad manager fields.

13. Apply the URL and parameters to your ad

In the ad manager of your traffic source:

• Sources with specific fields for URL and parameters — paste each block in its respective field.
• Sources without a specific field for parameters — paste them after the URL using ?:

https://your-twr-domain/?twr_parameters

If you use UTMs or other tracking parameters, concatenate with &:

https://your-twr-domain/?twr_parameters&utm_source=source&utm_campaign=test

14. Install the script on the safe page hosting (Shadow campaigns)

Shadow-type campaigns generate a script instead of a URL. This script must be installed on the safe page hosting — never on the offer page, which stays isolated.

In the hosting's file manager:

1. Open the public_html folder (domain root).
2. Create a new folder — name can be anything (e.g., home).
3. Inside it, create a file named index.php.
4. Paste the Shadow script into index.php and save.

15. Monitor the campaign in real time

With the ad running, go to the campaign settings and open the Charts tab. You'll see the individual chart with total requests and the distribution between safe page and offer page — in real time.

Frequently asked questions

1. What's the difference between Redirect, Prepage, and Mirror?

Redirect performs a direct redirection from one URL to another (most compatible). Prepage shows an "I'm not a robot" screen before redirecting. Mirror mirrors the page content within TWR's URL, with no redirection — it's the most recommended against spying.

2. When should I use a Standard campaign vs. a Shadow campaign?

Use Standard (external redirection) when the traffic source allows redirection. Use Shadow (script on hosting) when the source is more restrictive and doesn't allow redirection. Your subscription plan also defines which types are available.

3. Can I use the same domain as my offer page in TWR?

Not recommended. The domain used in TWR is exposed in the ad settings and can be seen by competitors. Use an exclusive domain for TWR and keep your offer page domain isolated.

4. How do I integrate tracking parameters (UTMs) with TWR's parameters?

Concatenate using & between TWR's parameters and yours. Order doesn't matter, as long as & is between the blocks.

5. Can I edit the campaign while the ad is running?

Yes, most settings — including changing the offer page URL — can be updated without pausing the ad. Don't change the domain, the Unique Token (both change the URL and parameters), or the safe page while the ad is active (it can raise suspicion).

6. How do I run an A/B test between offer pages?

In AB Storm (side menu), create a new test and add up to 20 page URLs. Then, in the campaign, switch from Single Offer to AB Storm and select the test. Changes apply in real time.

Updated on: 25/04/2026