My Review of Bruqi – 4/10
The service is more affordable than Rulta, but less competent. Their AI is counting spoof links as “de-listings”, counting it as “super special insights” and when you approach their customer service they just tell you that you don’t know what you’re talking about.
When I signed up for Bruqi – a DMCA software tool – in order to track links, little did I know, my takedowns would be impossible to actually track and they’d have absolutely no intention of revealing the links that were delisted. If I were an end-user making content full time I’d never even think to look into them, I’d assume they were legit based on what are most likely — paid reviews.
When I tried to pull my reports I was met with a pagination limit of 10 items. This is INSANE.
WHAT IS PAGINATION?
Imagine buying a book with 10 lines and then having to turn the page after that, but imagine you have 25,000 lines which would mean turning the page 2,500 times. If you were trying to accomplish what I was that means – turning the page 2,500 times + copying and pasting every single link you found. And beyond THAT, you’d also have to scroll through a million lines of code, and start over for each pagination.
So, yeah, pagination is trash. No one likes it. Most people click the “Show 250 rows” instead of 10 but with apps like Bruqie that isn’t an option.
What the Bruqi Link Problem Revealed
One thing that really stood out to me while studying takedown tools was how easy some of them seemed to confuse real links to spoof links over and over at the end, basically like /t/t/t/t/t/ stuck onto the URL in an infinite loop. That should NOT be enough to throw off a supposed enterprise level system that is supposed to help creators fight abuse. If a link is clearly padded with junk, the software should be smart enough to recognize that.
That is a bigger deal than it sounds, but look at this way:
If you are paying for a limited number of reports each month (say 3,000) and their AI can pull an unlimited number of links from a site that doesn’t use traditional link-building systems, you’re paying for them to remove links THAT DON’T EVEN EXIST.
The Software I’m Building
The softare I’m designing is intended to counteract this weird ass blackhat strategy. There are patterns they’re leaving behind which can be predicted and my software is beginning to pick up on it.
I intend on making it accessible and functional to users with a pay-as-you-go or credits model so you don’t ever have to pay a monthly subscription.
Believe me you’re not the only one sick of subscriptions.
The Offender’s Accidental DMCA-avoidant Strategy
A lot of offenders aren’t using some genius strategy, they’re just making small, messy changes to links so automated systems treat them like something new. If the software cannot catch that, then the creator is the one left sorting through the same problem again and again. That is frustrating, and it is part of why so many people end up feeling like these services are not really built for them.
A good takedown tool needs more than a fancy dashboard. It should be able to:
- clean up messy URLs
- spot duplicates and repeats
- catch obvious junk at the end of links
- make the process easier instead of harder
If it cannot do that, then it is not protecting creators nearly as well as it should.
Littered with Spoof Links
So, instead, I wrote a script in Python.
YOU MUST KNOW HOW TO FIND AN API KEY (BASICALLY YOUR PASSWORD, SO I LITERALLY COULD NOT TELL YOU WHAT IT IS)
The script I used, and the process went like this:
*** use Chrome 3 dots --> Developer Tools --> Network --> watch for response of "found-leaks" --> The pagination maximum is 1000 lines *******
Use this script with CURL data:
curl ^"https://api.bruqi.com/members/leaks-found^" ^
-H ^"accept: application/json, text/plain, */*^" ^
-H ^"accept-language: en-US,en;q=0.9^" ^
-H ^"baggage: sentry-environment=production,sentry-public_key=d540764b2dcd9d4e48b47daf004b4974,sentry-trace_id=03c08a62e98e4a04ac40e3f64e83ad91,sentry-sampled=false,sentry-sample_rand=0.9433241050566373,sentry-sample_rate=0.05^" ^
-H ^"content-type: application/json^" ^
-H ^"origin: https://app.bruqi.com^" ^
-H ^"priority: u=1, i^" ^
-H ^"sec-ch-ua: ^\^"Chromium^\^";v=^\^"146^\^", ^\^"Not-A.Brand^\^";v=^\^"24^\^", ^\^"Google Chrome^\^";v=^\^"146^\^"^" ^
-H ^"sec-ch-ua-mobile: ?0^" ^
-H ^"sec-ch-ua-platform: ^\^"Windows^\^"^" ^
-H ^"sec-fetch-dest: empty^" ^
-H ^"sec-fetch-mode: cors^" ^
-H ^"sec-fetch-site: same-site^" ^
-H ^"sentry-trace: 03c08a62e98e4a04ac40e3f64e83ad91-9bd91f8e19c59e9c-0^" ^
-H ^"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36^" ^
-H ^"x-bruqi-class-name: Account^" ^
******************************************************************************************
-H ^"x-memberstack-token: ********************API Key Here*********************^" ^
****************************************************************************************
--data-raw ^"^{^\^"filters^\^":^{^},^\^"pagination^\^":1000,^\^"skip^\^":0^}^"
******************************************************************************************
******************************************************************************************
******************************************************************************************
******************************************************************************************
************************DO NOT EVER REVEAL UR ACTUAL API KEY******************************
******************************************************************************************
******************************************************************************************
******************************************************************************************
******************************************************************************************
******************************************************************************************
**************************** *POST** *****************************
******************************************************************************************
post endpoint POST https://api.bruqi.com/members/leaks-found
"https://ibradome.com/leak/video/123456[UNIQUE-CONTENT-CREATOR-ID_SOME_NUMBER-HERE]/LITERALLY-DOESNT-MATTER-WHAT-YOU-PUT-HERE-SPOOF-URL/leak/photos/[SOME-OTHER-NUMBER-HERE_CONTENT-PIECE-IDENTIFIER]/name-name-name-whatever-the-search-query-was-goes-here-[some-random-number-goes-here]"
,"title":"[[[[[[[[[[SCRAPED ID NAME WITHOUT CODE HERE]]]]]]]]]]]]]","snippet":"[[[[[[SCRAPED DESCRIPTION HERE]]]]]]]]","createdAt":"2026-03-02T00:55:22.245Z","lastSeenAt":"2026-03-02T00:55:22.183Z","delistedAt":"2026-03-02T01:33:59.215Z","submittedAt":"2026-03-02T08:49:02.845Z","googleStatus":"approved","foundAt":"2026-03-02T00:55:22.183Z","delisted":"2026-03-02T01:33:59.215Z","removed":"2026-03-02T08:49:02.845Z"}]}
The result (What I wanted) was all 33k links that they supposedly had de-listed.
What I found was:
Some legit links
A whole hell of a lot more spoof links
A terrible, possibly AI-only, customer support team
Money that I wasted
Before the scrape
I searched for my own takedowns on Lumen Database and on Google’s Transparency Report tool.
I asked them very explicity for a report and they refused and said “it’s not possible.” Even as a low-level software developer, I know this is a scripted response. It is absolutely possible. And if not, I have to wonder where that info goes.
Sadly Lumen Database is an absolute piece of trash and has been for at least a year. They’re either getting DDOS’d and don’t care or they stopped paying for hosting – not my circus, not my monkey.
My faster response was scraping Bruqi and downloading Google Transparency’s 15gb zipfile (about 90 gigs unzipped) and running scripts to pull out unique URLs and learn what sites have been reported.
I’ll be adding that script to GitHub later in a private folder. After extracting links I came up with over 160,000 offensive sites.
If you have basic coding skills, I truly hope the above code block helps! If you aren’t into that, then I hope I can be of more assistance, once my final product is ready for release 🙂