Techniques for third party verification using override IP addresses is described, including detecting a request header from an endpoint, the request header being associated with a request for a media file, initiating a download of the media file to the endpoint, evaluating the request header to identify an address associated with the endpoint, generating a notification comprising the address, the notification being configured to indicate the address overrides a source address identified by a field in a packet associated with the request header, and sending the notification to report data associated with the media file, wherein the address overrides the source address to identify a source of the request.