I think the mistake you are making is getting hung up on the Null Bush piece. You need to look at the credentials of the consultant that did the audit testing, rather than the name of his LLC. I have multiple LLC's for different businesses I own, but none of them have a website under the LLC name.
As far as the referral token distribution goes, the team have repeatedly stated that there was a lot of fraud in the referral process (which is no surprise) and they want to weed out the fraud to protect all token holders. I think you need to just trust the team on that - I have been part of the community since the very early days and had over 800 referrals. I know all of mine are legitimate, but would rather wait to receive the token distribution if it means that less tokens are distributed to fraudsters since that will benefit the value of my tokens!!!