iWant supply chain report · App Supply Index

Findings

Each finding lists the exact lines involved. Findings are automated observations of public files as of Oct 7, 2026. They describe file contents, not the intent or conduct of any company.

warning

DIRECT lines inconsistent with public data

12 −11 pts

The ads.txt specification defines DIRECT as an account the publisher directly controls. For these lines, either the ad system's own sellers.json lists the account as INTERMEDIARY, or the same account is marked DIRECT in the files of 3 or more unrelated companies. Either way, the public data does not support the DIRECT label. Buyers that use DIRECT labels in supply-path decisions may treat these lines differently.

How to fixUse DIRECT only for accounts your company controls. Confirm with each partner whether the account is yours; if it isn't, the specification calls for RESELLER.

Evidence (12)

line 53     google.com, pub-7995104076770938, DIRECT, f08c47fec0942fa0
             → observed: the same account is marked DIRECT by 12 different companies  name in sellers.json: H Code Media, Inc.  domain in sellers.json: hcodemedia.com
line 60     openx.com, 545706894, DIRECT, 6a698e2ec38604c6
             → observed: sellers.json lists the account as INTERMEDIARY  name in sellers.json: My Code Media Inc.  domain in sellers.json: hcodemedia.com
line 61     openx.com, 542291481, DIRECT, 6a698e2ec38604c6
             → observed: sellers.json lists the account as INTERMEDIARY; the same account is marked DIRECT by 4 different companies  name in sellers.json: My Code Media Inc.  domain in sellers.json: hcodemedia.com
line 62     openx.com, 540322758, DIRECT, 6a698e2ec38604c6
             → observed: sellers.json lists the account as INTERMEDIARY; the same account is marked DIRECT by 4 different companies  name in sellers.json: My Code Media Inc. (via EB)  domain in sellers.json: google.com
line 63     openx.com, 543833106, DIRECT, 6a698e2ec38604c6
             → observed: sellers.json lists the account as INTERMEDIARY; the same account is marked DIRECT by 3 different companies  name in sellers.json: My Code Media Inc.  domain in sellers.json: hcodemedia.com
line 64     indexexchange.com, 194359, DIRECT, 50b1c356f2c5c8fc
             → observed: the same account is marked DIRECT by 3 different companies
line 67     freewheel.tv, 1569001, DIRECT
             → observed: the same account is marked DIRECT by 3 different companies
line 70     pubmatic.com, 157163, DIRECT, 5d62403b186f2ace
             → observed: sellers.json lists the account as INTERMEDIARY; the same account is marked DIRECT by 3 different companies  name in sellers.json: H Code Media, Inc.  domain in sellers.json: hcodemedia.com
line 112    sharethrough.com, ffb088fa, DIRECT, d53b998a7bd4ecd4
             → observed: sellers.json lists the account as INTERMEDIARY; the same account is marked DIRECT by 9 different companies  name in sellers.json: Videobyte(Kargo) - oRTB  domain in sellers.json: videobyte.com
line 119    rubiconproject.com, 15268, DIRECT, 0bfd66d529a55807
             → observed: sellers.json lists the account as INTERMEDIARY; the same account is marked DIRECT by 111 different companies  name in sellers.json: Unruly Group LTD  domain in sellers.json: unrulymedia.com
line 142    openx.com, 540635236, DIRECT, 6a698e2ec38604c6
             → observed: sellers.json lists the account as INTERMEDIARY  name in sellers.json: ABS-CBN CORP (via EB)  domain in sellers.json: google.com
line 147    pubmatic.com, 159258, DIRECT, 5d62403b186f2ace
             → observed: sellers.json lists the account as INTERMEDIARY  name in sellers.json: ABS-CBN Corporation (via EB)  domain in sellers.json: google.com

warning

Seller IDs not listed in the ad system's sellers.json

7 −5 pts

The ad system's current sellers.json doesn't list these accounts, so buyers that validate the chain can't match them. Common causes are closed accounts or former partners.

How to fixAsk each partner whether the account is still active and request their current lines; remove lines for closed accounts.

Evidence (7)

line 9      google.com, pub-1805244726360577, DIRECT, f08c47fec0942fa0
             → sellers_json: https://realtimebidding.google.com/sellers.json
line 19     openx.com, 559091134, RESELLER, 6a698e2ec38604c6
             → sellers_json: https://openx.com/sellers.json
line 20     openx.com, 559092217, RESELLER, 6a698e2ec38604c6
             → sellers_json: https://openx.com/sellers.json
line 58     video.unrulymedia.com, 2689995808, DIRECT
             → sellers_json: https://video.unrulymedia.com/sellers.json
line 71     rubiconproject.com, 18008, RESELLER, 0bfd66d529a55807
             → sellers_json: https://rubiconproject.com/sellers.json
line 101    appnexus.com, 14077, RESELLER, f5ab79cb980f11d1
             → sellers_json: https://appnexus.com/sellers.json
line 120    appnexus.com, 6849, RESELLER, f5ab79cb980f11d1
             → sellers_json: https://appnexus.com/sellers.json

info

DIRECT accounts registered to another domain

2 −1 pts

Allowed when the domain belongs to the same company; add OWNERDOMAIN to make that explicit. Otherwise these accounts may belong to someone else.

How to fixIf the account is yours under another domain, declare it with OWNERDOMAIN=<that domain>; otherwise mark it RESELLER.

Evidence (2)

line 35     ondemandkorea.com, 1, DIRECT
             → domain in sellers.json: xumo.tv  name in sellers.json: Xumo
line 59     pubmatic.com, 160876, DIRECT, 5d62403b186f2ace
             → domain in sellers.json: hcodemedia.com  name in sellers.json: H Code Media, Inc.

info

Ad systems without a public sellers.json

The ad system doesn't publish a readable sellers.json, so nobody can verify these lines. That's the ad system's gap, not the app's, so no points are deducted.

How to fixAsk the partner to publish sellers.json; until then buyers can't verify that path.

Evidence (6)

line 23     lgads.tv, 830718, RESELLER
             → sellers_json: HTTP 403 to automated requests
line 57     rhythmone.com, 2689995808, DIRECT, a670c89d4a324e47
             → sellers_json: HTTP 403 to automated requests
line 97     gamaigroup.com, 320201, RESELLER
             → sellers_json: file is not valid JSON
line 98     iqzone.com, IQ87, RESELLER
             → sellers_json: bot-check or captcha page (HTTP 202)
line 110    rhythmone.com, 727427301, RESELLER, a670c89d4a324e47
             → sellers_json: HTTP 403 to automated requests
line 130    ogury.com, b2d16de9-8d5a-4c92-a7ab-7959998038cc, DIRECT
             → sellers_json: HTTP 403 to automated requests