BullSniff — Website warning signs

Research suspicious AI-generated businesses using site-wide claims, domain history and evidence networks.

BullSniff gives suspicious websites a quick sniff test before you trust them or buy. Open a store or business website, click BullSniff, then click “Sniff this site.” The extension researches up to 16 public pages on that site and combines warning signs including: - missing or hard-to-find contact and policy links - sparse address, phone or company-registration details - ratings and testimonials with no recognised independent review link - repeated customer portraits on the same page - stacked pressure tactics, extreme discounts and contradictory offer numbers - dense trust, testing and verification claims - networks of outside sites presented as independent evidence - broad service catalogues resting on one named customer story - case-study metrics sourced from private dashboards or the subject’s own estimate - automated publishing under human bylines - named people recurring across supposedly separate portfolio or customer sites - structured page or public sitemap dates that predate the site’s public domain registration - unusually close registration timing or shared nameservers across cited evidence sites - research-only disclaimers beside consumer checkout - unusual payment-routing caveats and crypto incentives - generic promotional phrases that may be AI-generated - insecure forms and limited visible evidence BullSniff runs only when you click it. Version 0.10.0 follows same-site public links and analyses page content locally in Chrome. Its evidence-aware scoring separates ordinary business claims and B2B case studies from higher-risk combinations such as financial pressure, government impersonation, circular proof, dramatic health claims and coordinated verification networks. It shows a separate evidence-coverage rating across five categories, so a low warning score with little material to inspect is not presented as a clean bill of health. It sends BullSniff only the scanned hostname and up to 11 domains presented by the site as customers, portfolio work, reviews, testing, forums or verification evidence. BullSniff uses those domain names for public RDAP registration, DNS nameserver, robots.txt, bounded XML sitemap and public company-page checks. It does not send page paths, text, titles, images, form contents, passwords or wider browsing history. The website being scanned receives ordinary browser requests for the public pages BullSniff follows. BullSniff does not include page content or personal data in those requests, does not use account credentials, and skips account, profile, sign-in and administrative routes. BullSniff is a reason to pause, not a fraud verdict. A missing link, recurring name, repeated image, shared nameserver or close registration date is not proof that a business is fake, that two domains share an owner or that two people have a particular relationship. The extension does not reverse-search images, verify legal companies or prove claims and reviewer identi