← Website Fraud Checker (paste a URL, no terminal needed)

Live Traffic Classification

Polling /api/stats every 2 seconds. Rows are classified using two simple signals: click rate in the last 10 seconds, and whether the User-Agent looks like a scripted HTTP client instead of a real browser.

Open the demo page in one tab and run npm run bot-demo, npm run human-demo, npm run proxy-rotation-demo, npm run fingerprint-spoofing-demo, or npm run captcha-bypass-demo in a terminal, then watch this page update.
Recommended order: 1) bot-demo — too many clicks too fast from one IP, caught instantly. 2) human-demo — normal pace, stays HUMAN. 3) proxy-rotation-demo — same volume as bot-demo, but spread across many simulated IPs with real-looking browser User-Agents, so every row shows HUMAN and the per-IP rate limit never trips. 4) fingerprint-spoofing-demo — does everything proxy-rotation-demo does, plus fakes a brand-new device (screen size, timezone, language, platform) on every click — rows still look HUMAN individually, but watch the campaign panel below light up. 5) captcha-bypass-demo — spams the "Submit Review" action on the demo page; once our toy captcha kicks in, the script auto-solves it because it's just plain, undistorted text — watch the captcha panel below count the auto-solved challenges. 6) hacker-seo-demo — puts it all together: one honest site vs. one site that stacks keyword stuffing, cloaking, bought backlinks, fake reviews, and bot traffic to try to outrank it, then watch it collapse the moment the ranking formula is patched.
More techniques (each prints its own lesson to the terminal): negative-seo-demo — attacking a competitor instead of boosting yourself. expired-domain-demo — buying an old domain to inherit its authority. parasite-seo-demo — publishing on someone else's high-authority platform. fake-schema-demo — publishing star-rating markup that doesn't match real reviews. review-gating-demo — only asking happy customers to leave a public review. sneaky-redirect-demo — sending crawlers and humans to different destinations. engagement-fraud-demo — faking how long visitors stick around, watch on /api/dwell-stats. ad-fraud-demo — click-bombing a rival's paid ad budget to zero. Run any of them with npm run <name>.
Campaign fingerprint signal Waiting for clicks...
Toy CAPTCHA signal Waiting for protected-action submissions...
IP Total Clicks Clicks / 10s User-Agent Status