This article is also available in:

Unpack method: install the campaign on your hosting

The White Rabbit (TWR) Unpack method installs the filtering inside your own hosting through a PHP file, with no external redirect. There are two domains, each with its own role: the one registered in TWR generates the PHP file, and your hosting domain holds the pages and is the one that goes in the ad URL.

Before you start

A domain registered and verified in TWR, which generates the campaign's PHP file.
A hosting domain that runs PHP, with access to the file manager.

The two Unpack domains

Domain	Role	What you need
TWR domain	Generates the PHP file. It hosts no page and does not appear in the ad.	Subdomain and `CNAME` verified. See how to register your domain
Hosting domain	Holds the Safe Page, the Offer Page, and `index.php`. It's the ad URL.	Hosting with PHP and a file manager

With each domain in its own role, your hosting domain's DNS has no link to TWR, so anyone investigating the ad domain never reaches the filtering tool.

Step by step

1. Create the campaign and set name, domain, and traffic source

In Campaigns, click New campaign. Name the campaign, select the domain registered in TWR, and choose your ad's traffic source.

2. Set the countries and devices

Check the countries and devices that match your ad targeting. To advertise globally, leave them all checked.

Anything left out of the targeting goes straight to the Safe Page.

3. Confirm the Unpack delivery method

When you pick the traffic source, TWR already selects the recommended method for it. Confirm that the Safe Page and the Offer Page are set to Unpack.

Unlike the other delivery methods, Unpack doesn't generate a ready-made URL: it generates a PHP file for you to install. That's why the fields ask for the file path, not the page URL. See the delivery methods in TWR.

4. Upload the Safe Page and free up the site root

In the file manager of the hosting domain's public folder, upload the Safe Page. It and the Offer Page must stay on the same hosting, preferably in the same folder as the PHP file.

If your Offer Page is the root index.html, rename it to offer.html: that's the address the Unpack index.php will take.

5. Set the path to the Safe Page and the Offer Page

./ means "from the folder where the PHP file is".

Where the file is	What to enter
In the same folder as `index.php`	`./safe.html`
Inside a subfolder	`./pages/safe.html`

The Safe Page and the Offer Page also accept a URL instead of a path, for pages that aren't a file of yours on the hosting: a Shopify store, an affiliate link, or a tracking tool.

To split qualified traffic across several offer pages, switch Single Offer to AB Storm and set the path of each file inside the test: see how to A/B test offer pages.

The path must match the real file name exactly, otherwise the script won't find the page.

6. Enable the Unique Token (optional)

In the advanced options, enable the Unique Token and confirm. It adds a random password to the campaign parameters. The option depends on the traffic source.

7. Save the campaign and download the PHP file

Click Save campaign. TWR generates the PHP file and the ad parameters. Download the file and copy the parameters to a notepad.

8. Upload the file as index.php on your hosting

Upload the PHP file to the same folder as the Safe Page and the Offer Page.

The file must be named exactly index.php.

9. Set the URL and parameters in the ad

The ad URL is the address where you installed index.php, always with https://. Combine it with the parameters generated by TWR:

Scenario	How to enter it
Source with a separate field for parameters	URL in the destination field, parameters in their own field
Source with no separate field	`URL?parameters`

Use the parameters exactly as they were generated. Your own tracking parameters come after, joined with &.

If you use a tracking tool, tracking runs through a script on the Offer Page, not through a redirect URL: see how to use the Unpack method with a tracking tool.

10. Test the campaign redirect

When you open the index.php URL directly in the browser, TWR treats it as an access from outside the ad and shows the Safe Page. To see the Offer Page, enable Test Offer, copy the test parameter, and add it to the URL after ?. Turn it off when you're done.

The test doesn't affect performance and can be done with the ad running.

11. Track the requests and bots chart

In the campaign chart you see, in real time, the total requests and where each one went: Offer Page or Safe Page. Bots are sent to the Safe Page and counted separately, because they aren't billed.

Whenever you edit the Safe Page or Offer Page destination, including when you link an A/B test, TWR generates a new PHP file to replace on your hosting. The parameters never change.

Updated on: 31/08/2026

Was this article helpful?

Thank you!