Unpack method: install the campaign on your hosting
The White Rabbit (TWR) Unpack method installs the filtering technology inside your own hosting through a PHP file, with no external redirect. Two domains come into play: the one you register in TWR, which generates the file, and your hosting domain, which holds the pages and goes in the ad URL. We recommend keeping them separate.
Before you start
- A domain registered and verified in TWR, preferably not the same as your hosting domain. See the section below.
- Access to the file manager of a hosting account that runs PHP.
The two domains in Unpack
In Unpack, the domain registered in TWR and the domain that shows up in your ad play different roles:
Domain | What it's for | Recommendation |
|---|---|---|
TWR domain | Generates the campaign's PHP file. It never appears in the ad URL. | Registered and verified in TWR, with a subdomain and a |
Hosting domain | Holds the Safe Page, the Offer Page, and | Preferably a new domain, with no prior history |
Step by step
1. Create the campaign and set name, domain, and traffic source
In the Campaigns module, click Create. Give the campaign a name of your choice, select the domain registered in TWR, and pick the traffic source where you'll advertise. The Unpack method is available for ADSkeeper, Axon, BigoAds, Facebook, Google, Kwai, MediaGo, MGID, Microsoft, NewsBreak, Outbrain, Reddit, Revcontent, Rumble, SmartNews, Snapchat, Taboola, Telegram, TikTok, Traffic-Factory and Upsell Funnel. Which sources show up for you also depends on your subscription plan.

2. Set the countries and devices
Select the countries and devices according to your ad targeting. To advertise globally, leave them all checked.

3. Select the Unpack method
Among the campaign delivery methods, select Unpack. Unlike TWR Redirect, Pre Page, and TWR Mirror, which generate a ready-to-use ad URL, Unpack generates a PHP file that you install on your hosting. That's why, in the Safe Page and Offer Page fields, you enter the file path, not the page URL.

4. Put the page files in the same folder
Upload the Safe Page and Offer Page files to your site's public folder. Both stay in the same folder, together with the campaign's PHP file. Each file name is up to you and is never visible to whoever clicks the ad.

5. Set the path to the Safe Page and the Offer Page
The ./ means "from the folder where the PHP file is installed". With everything in the same folder, just enter each page's file name. To run more than one Offer Page, see how to A/B test offer pages.
Field | Path | What the script reads |
|---|---|---|
Safe Page |
| Use the |
Offer Page |
| Use the |

6. Enable the Unique Token (optional)
Enable the Unique Token when the option is available for your traffic source. It generates a random password that goes in with the campaign parameters, adding an extra layer of protection. It requires no additional setup, which is why we recommend turning it on.

7. Save the campaign and download the PHP file
Click Save. TWR generates the campaign's PHP file and the parameters you'll use in your traffic source. Download the file and copy the parameters to a notepad.

8. Upload the PHP file to your hosting
Upload the PHP file to the same folder as the Safe Page and Offer Page files. You can drag the file into the manager or use the upload button.

index.php, so rename it before continuing.9. Set the ad URL and parameters
The URL that goes in your ad is the address on your hosting domain where you installed index.php, the same URL that loads that file in the browser. Always use it with https://.
Combine that URL with the parameters generated by TWR, according to your traffic source:
Scenario | How to enter it |
|---|---|
Source with a separate field for parameters | URL in the ad's destination field + parameters in the tool's dedicated field |
Source with no separate field for parameters |
|
If you use a tracking tool, tracking has to run through a script installed on the Offer Page, not through a redirect URL: see how to use the Unpack method with a tracking tool.
10. Test the campaign redirect
When you open the index.php URL directly in the browser, TWR detects an access from outside the ad and shows the Safe Page. To check the Offer Page, use the Test button: it generates a test parameter that you add to the URL. With that parameter, you're redirected to the Offer Page defined in the campaign. Turn off test mode when you're done.

11. Track the requests and bots chart
In the campaign chart you see, in real time, the total requests coming in and where each one goes: Offer Page or Safe Page. Bots that try to access the funnel are all sent to the Safe Page and counted separately, because they aren't billed.

Updated on: 07/08/2026
Thank you!