Pixalate’s AdFraud Indicators Of Compromise (IOC)-Database for December 2025 surfaces Connected TV (CTV) bundle IDs observed in the programmatic supply chain that are associated with fraudulent or malformed identifiers and ranks them by impression volume. It is based on the Pixalate AdFraud IOC-Database, the ad industry’s first open-source intelligence feed designed to aid fraud researchers, developers, and system administrators in the fight against Invalid Traffic (IVT).
The publicly available AdFraud IOC-Database is Pixalate's open-source, weekly-updated list of the top 50 highest-risk ad fraud Indicators of Compromise (IOCs). AdFraud IOC-DB is powered by Pixalate's MRC-accredited ad fraud detection engine, which analyzes 183 billion global data points daily. It filters massive datasets down to the 50 most critical threats, allowing sysadmins to easily integrate high-risk blocklists without overwhelming their infrastructure. The AdFraud IOC-DB reveals the top 50 IOCs observed across multiple supply-path touchpoints, including IP addresses (both IPv4 and IPv6), device IDs (mobile and CTV), datacenters, fraudulent Bundle IDs, MFA publishers, and delisted apps.
AdFraud IOC-DB is dedicated to helping combat the spread of ad fraud, invalid traffic, and abusive activity in the digital advertising supply chain. This mission aligns with Pixalate's broader goal of identifying bad actors and safeguarding the digital advertising supply chain and consumers from Invalid Traffic (IVT) and abusive activity.
The database is built for ad fraud researchers, publishers, sysadmins, security teams, and platform operators who need actionable threat intelligence to block high-risk endpoints in the ad supply chain. By publicly releasing a free, weekly-updated feed of the highest-risk threat indicators, Pixalate aims to arm Small to Mid-sized publishers (SMBs) and the ad-tech community with the enterprise-grade intelligence needed to safeguard the digital supply chain.
The AdFraud IOC-DB is updated weekly, surfacing the top 50 highest-risk IOCs in each category based on ad volume from Pixalate's analysis of 183 billion global data points per day.
The AdFraud IOC-DB is available for free on Pixalate's website, where users can see the weekly top 50 IOCs across all eight categories.
See also:
Pixalate is a global platform for privacy compliance, ad fraud prevention, and data intelligence in the digital ad supply chain. Founded in 2012, Pixalate’s platform is trusted by regulators, data researchers, advertisers, publishers, ad tech platforms, and financial analysts across the Connected TV (CTV), mobile app, and website ecosystems. Pixalate is MRC-accredited for the detection and filtration of Sophisticated Invalid Traffic (SIVT).
DISCLAIMER: The AdFraud IOC Database (the "IOC-DB" or "Lists"), reflects Pixalate's opinions with respect to factors that Pixalate believes may be useful to the digital media industry. Pixalate is disclosing this information within the IOC-DB based on evidence suggesting that spammers and other malicious actors may be utilizing certain identifiers - including but not limited to Data Center IP addresses, IPv4 and IPv6 addresses, Connected TV (CTV) device identifiers ("IDs"), malformed CTV bundle IDs, domain names, website URLs, and other identified digital markers - to conduct harmful online activities within the digital advertising ecosystem. As such, the Lists are only intended for internal and operational use in fraud prevention, ad verification efforts, and related initiatives to protect organisations from digital advertising fraud, including proxy and video impression IVT, bot traffic, and other forms of automated abuse. Pixalate's opinions are just that, opinions, which means that they are neither facts nor guarantees. Pixalate is sharing this data not to impugn the standing or reputation of any entity, person or app, but, instead, to report findings and trends pertaining to programmatic advertising activity in the time period studied. Pixalate on behalf of itself, its suppliers and third-party licensors, expressly disclaims all representations, warranties, and conditions, whether express or implied, statutory or otherwise, including any implied warranties of merchantability, fitness for a particular purpose, satisfactory quality, and non-infringement of third party rights, to the greatest extent permitted by applicable laws.
Contact
Offices
Disclaimer: The content of this page reflects Pixalate’s opinions with respect to the factors that Pixalate believes can be useful to the digital media industry. Any proprietary data shared is grounded in Pixalate’s proprietary technology and analytics, which Pixalate is continuously evaluating and updating. Any references to outside sources should not be construed as endorsements. Pixalate’s opinions are just that - opinion, not facts or guarantees.
Per the MRC, “'Fraud' is not intended to represent fraud as defined in various laws, statutes and ordinances or as conventionally used in U.S. Court or other legal proceedings, but rather a custom definition strictly for advertising measurement purposes. Also per the MRC, “‘Invalid Traffic’ is defined generally as traffic that does not meet certain ad serving quality or completeness criteria, or otherwise does not represent legitimate ad traffic that should be included in measurement counts. Among the reasons why ad traffic may be deemed invalid is it is a result of non-human traffic (spiders, bots, etc.), or activity designed to produce fraudulent traffic.”
