> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.pixalate.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.pixalate.com/_mcp/server.

# Pre-bid data feeds

> What Pixalate's pre-bid data feeds are, who uses them, which feed blocks what, and how often each feed is updated.

Pixalate's data feeds are CSV lists of IP addresses, device IDs, apps, domains, user agents and supply paths that Pixalate has flagged as invalid traffic (IVT) or as a risk. You download the files and load them onto the servers that make your bidding or ad-serving decisions. When a bid or ad request arrives, check its details (IP, device ID, app ID and so on) against the lists, and reject the request if any of them is listed.

Because the lists sit on your own servers, you decide how to apply each one: to all of your traffic or only to some partners, and with your own thresholds.

*Video (2 min): which Pixalate data feed fits which job.*

## Who uses the feeds

The feeds are built for platforms that decide on an impression before it's bought or served:

* **DSPs** that don't want to bid on invalid devices, IPs, apps or domains.
* **SSPs and exchanges** that want to remove risky supply before it reaches buyers.
* **Any platform that blocks pre-bid** by matching request details against a list.

To check one IP address, device ID or user agent at a time in real time, use the [Fraud API](/apis/fraud-api) instead of a list. If you buy on Amazon DSP, you can turn on Pixalate filtering in your line items; see [Amazon DSP](/data-feeds/amazon-dsp).

## Which feed for what

| To block                                                 | Use                                                              | What's in it                                                                                                         |
| -------------------------------------------------------- | ---------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- |
| Compromised or malicious IP addresses                    | [IP block lists (IPv4 and IPv6)](/data-feeds/ip-block-lists)     | IPs with an IVT type and a probability                                                                               |
| Traffic from data centers, hosting and cloud providers   | [Data center feeds](/data-feeds/data-center)                     | IPv4 and IPv6 CIDR ranges, in separate feeds                                                                         |
| Gateway IPs with many users behind them                  | [Proxy gateway reference list](/data-feeds/proxy-gateway)        | Gateway IPs with the estimated number of users behind each. A reference list to refine IP blocking, not a block list |
| Fraudulent mobile devices                                | [Mobile device ID feed](/data-feeds/mobile-device-ids)           | Device IDs with OS, ID type, IVT type and probability                                                                |
| Fraudulent connected TV (CTV) devices                    | [CTV device ID feed](/data-feeds/ctv-device-ids)                 | CTV device IDs with OS, IFA type, device name, IVT type and probability                                              |
| Risky mobile apps                                        | [High Risk Mobile Apps 2.0](/data-feeds/high-risk-mobile-apps)   | App IDs with one or more risk types                                                                                  |
| Risky CTV apps                                           | [High Risk CTV Apps 2.0](/data-feeds/high-risk-ctv-apps)         | CTV app IDs with one or more risk types                                                                              |
| Risky websites                                           | [High Risk Domains](/data-feeds/high-risk-domains)               | Domain lists by risk, such as malware and phishing, low viewability and new domains                                  |
| Apps removed from the app stores                         | [Delisted apps (DEFASE)](/data-feeds/defase)                     | Mobile and CTV apps delisted from their app stores                                                                   |
| CTV bundle IDs that are malformed or can't be identified | [Malformed CTV bundle IDs](/data-feeds/malformed-ctv-bundle-ids) | CTV bundle IDs with OS and platform                                                                                  |
| Made for advertising (MFA) websites and apps             | [MFA data feeds](/data-feeds/mfa)                                | Websites, mobile apps and CTV apps with an MFA risk level                                                            |
| Risky sellers in the supply path                         | [Supply path (SPO) feed](/data-feeds/spo)                        | Ad systems and seller IDs with a risk type and probability                                                           |
| Bots, crawlers and other non-human user agents           | [User-agent feed](/data-feeds/user-agents)                       | User-agent strings                                                                                                   |

Your contract sets which feeds you receive. To add one, contact your Pixalate account manager.

## How often each feed is updated

| Feed                                   | Updated                                               | Estimated availability           |
| -------------------------------------- | ----------------------------------------------------- | -------------------------------- |
| IP block list, IPv4                    | Hourly                                                | Each hour                        |
| IP block list, IPv6                    | Twice a day                                           |                                  |
| Data center feeds, IPv4 and IPv6       | Weekly                                                | Fridays, 12:00 AM UTC            |
| Proxy gateway reference list           | Contact support                                       | Reference list, not a block list |
| Mobile device ID feed                  | Hourly                                                | Each hour                        |
| CTV device ID feed                     | Hourly                                                | Each hour                        |
| High Risk Mobile Apps 2.0              | Daily                                                 |                                  |
| High Risk CTV Apps 2.0                 | Daily                                                 |                                  |
| High Risk Domains                      | Daily                                                 |                                  |
| Delisted apps (DEFASE), mobile and CTV | Daily                                                 |                                  |
| Malformed CTV bundle IDs               | Weekly                                                | 8:00 AM UTC                      |
| MFA data feeds                         | Daily                                                 | 8:00 AM Pacific time             |
| Supply path (SPO) feed                 | Daily                                                 | 8:00 AM UTC                      |
| User-agent feed                        | Daily or weekly, depending on the version you receive |                                  |

Availability times are estimates, so don't rely on the clock alone. Check each file's last-modified time, as described in [Poll for new files](/data-feeds/delivery#poll-for-new-files). Cadence changes are announced in the [changelog](/changelog).

## Next steps

#### [Delivery and integration](/data-feeds/delivery)

How you get access, how files are delivered and named, and how to poll for new ones.

#### [Blocking FAQ](/data-feeds/faq)

Thresholds, exceptions, and how blocking relates to Analytics and the Media Ratings Terminal (MRT).

#### [Fraud API](/apis/fraud-api)

Look up one IP address, device ID or user agent in real time.

Questions? Contact your Pixalate account manager or [support@pixalate.com](mailto:support@pixalate.com).