Domain spoofing

Advertisers and feed owners pay more, and worry less, when traffic appears to come from a respected site. Domain spoofing exploits that by lying about the origin: the request says "this visit is on a famous news site" when it is on an unknown page or no page at all.

In display advertising the main counter-measure is ads.txt, a public file listing who may sell a site's ad space. In search arbitrage the same lie takes a different shape. Feeds are approved per domain and per traffic source, so a fraudster reports clicks under an approved domain or Channel ID while the users are actually somewhere unapproved. It often overlaps with referrer spoofing and traffic laundering.

Red flags are a mismatch between the declared domain and the page where the ad actually rendered, traffic volumes the real site could not produce, and audience data (countries, devices) that does not fit the claimed site.

The MRC standards class misrepresented origin as SIVT. Defence means verifying the rendering page independently of what the request claims, and auditing partners' domains regularly.

Think of it like this

It is selling a knock-off handbag with a luxury label sewn in. The buyer pays for the name and gets something else.