For a quick sniff test, i usually just run a traceroute and check against public asn databases. if it doesn't line up, it's a hard pass. honestly, for the real work, it's all about testing against the actual sites you need. anything else is just guess-work