Domain spoofing remains an unsolved issue in programmatic advertising
Ask marketers about a persistent, unresolved issue in programmatic advertising, and many will agree: domain spoofing.
Domain spoofing, where unscrupulous publishers, ad networks or exchanges obscure the nature of their traffic to resemble legitimate websites, is not a new problem in the industry. But it has gained much attention lately because marketers are increasingly focused on fraud and brand safety.
The Interactive Advertising Bureau Tech Lab, for instance, started an initiative called ads.txt last month to show media buyers eligible distributors of a publisher’s inventory. For example, if a demand-side platform or an agency trade desk wants to buy inventory from goodsite.com on an open exchange, it will be able to see if that exchange is an authorized reseller of the publisher by visiting http://goodsite.com/ads.txt.
Spoofed domains are not just fake website addresses, they are also banner farms that contain bad content, according to programmatic analytics firm Metamarkets. For instance, the company has a brand client whose ads should have been served to a legitimate entertainment website with very high monthly traffic. But the brand’s ads ended up instead on an unknown site called mangago.me.
Domain spoofing is not only caused by ad networks, exchanges or fraudulent websites. At least 10 out of the top 100 publishers ranked by comScore are also feeding this practice by buying fraudulent traffic from ad networks, according to Chris Wexler, svp and executive director of media and analytics for agency Cramer-Krasselt. “Those fraudsters get a few cents more per thousand [impressions] today, but in the long run, it depresses revenue for legitimate publishers and trust in the market for advertisers,” said Wexler.
The flow of an ad impression is typically like this: A publisher creates a bid request, passes it to several supply-side platforms or ad exchanges that further send the bid request to multiple DSPs. Once the bid is won, the publisher ad server will call the demand side ad server and the ad is rendered, according to Mike Caprio, chief growth officer for ad tech firm Sizmek.
“None of those parties have full visibility on what happens as it takes a number of hops in the process,” said Caprio.
A bid request itself contains information like a publisher’s domain, article URL, ad placement ID and other metadata like content category and user information. It is hard for DSPs to catch fake domains because they make transactions mainly based on the site domain and article URL in bid requests. If a publisher, an ad network or an ad exchange rewrites the domain in the first place, DSPs won’t be able to tell the difference, according to Curt Larson, vp of product for programmatic native firm Sharethrough.
Theoretically, SSPs are the first line of defense and should be checking things like the origin of the page and when the domain registration took place (if a site was registered two days ago, there’s no way it can sell 50 million impressions in an open exchange, for instance), but SSPs have no incentive to do so because they make money off the volume they push through, according to Caprio. And SSPs that are in the practice of aggregation could spoof the domain from a small site and sell it as if it were on a more well-known domain, added Steve Sullivan, vp of partner success for Index Exchange.
And for agencies, finger pointing among ad tech middlemen makes it even harder to catch nefarious behaviors. “The opacity of the impression supply and distribution chain makes it easy for everyone in the chain to push responsibility to someone else,” said Wexler. “The truth is solving [domain spoofing] is very hard and expensive. Everyone is hoping someone else is going to do it so they don’t have to spend their time and effort.”
Dan Davies, svp and director of media sciences for agency MullenLowe’s Mediahub, also said that he experiences vendors’ finger pointing a lot. His team works with third-party companies like Moat and Integral Ad Science to check if an impression’s domain information and page information match, but nobody can catch spoofed domains completely.
“I think ad exchanges are in the best position to filter sellers,” said Davies. “I really hope that the industry can crack down on domain spoofing. As we clean up more and more ad inventory the CPM will probably go up, but that’s fine as long as we are buying legitimate impressions.”
While media buyers can work with third-party vendors to run pre-bid and post-buy verification, the technology for DSPs and SSPs to detect spoofed domains in real time doesn’t exist today, according to executives interviewed for this article. Both Larson and Sullivan hope that the IAB’s ads.txt project can bring more transparency to programmatic because this initiative urges SSPs to be diligent about only representing media that they are authorized to sell.
“The sell-side of the industry must take responsibility for this issue,” said Sullivan. “On the other hand, DSPs must not turn a blind eye to those opportunities that seem too good to be true.”
‘I felt like I was pushed into being a stay-at-home mom’: Confessions of a former ad exec on being fired after becoming a mother
In this edition of our Confessions series, where we exchange anonymity for candor, we hear from a former agency director about getting fired and struggling to find a job amidst navigating motherhood and launching a new project.
To get the attention of millennials and Gen Z, Ace Hardware is turning to influencers
Ace Hardware is adding a paid and organic influencer strategy to its marketing mix to allow the brand to make content that “doesn’t feel like an ad."
‘The world of either is behind us’: Marketers predict the future of events will be a hybrid of online, in-person
Hybrid events, combining in-person programming with an online experience, are likely to become the norm as the vaccine rollout and general return to life continues.
SponsoredVideo: How employer rewards and incentives changed in 2020
The nature of employer rewards programs has transformed, accelerated by the events of 2020 — a year of sweeping change. Employees shifted to digital, their preferences moved to digital wallets and they asked for new and surprising ways to use the rewards their employers delivered. In these new interviews, employer rewards experts talk about the evolving […]
Member ExclusiveMarketing Briefing: With Cannes Lions once again virtual, the ‘networking and dealmaking is likely the biggest casualty’
The promise of another virtual event when many execs are Zoomed out and feel like it’s impossible to unplug from daily work for a virtual event has some questioning what attendance or networking will be like.
Cheat Sheet: Pinterest’s new rules hold creators accountable for posting brand-safe content
Pinterest's "Creator Code" mandatory content policy guidelines will keep its content creators in check, ensuring Story Pins adhere to the tone and brand-safe messaging Pinterest wants to market.