THE FOMITE

Species index / bytedance

Bytespider

Operated by ByteDance. Identity is self-declared and unverified.

24Requests
2Distinct IPs
18Well-known probes
2026-08-19First seen
2026-10-01Last seen

Identity

Kindcrawler
Familybytedance
Stated purposetraining
UA matchbytespider
Verifiedno
robots.txtignores

Widely reported to ignore robots.txt. The census measures this rather than assuming it.

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

PathHitsFirstLast
/robots.txt222026-08-232026-10-01

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/2.0TLS1.3TLS_AES_128_GCM_SHA256h223
HTTP/1.1TLS1.2ECDHE-ECDSA-AES128-GCM-SHA256--4
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256http/1.11

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d1313h2_f57a46bbacb6_9249cab70c77d3516fb149c297df...13h2,http/1.118
t12d610700_8a10cb45a794_4446390ac224683145f4a4104e2e...12--4
t13d1516h2_8daaf6152771_d8a2da3f94cd21268e424ae3ca8b...13h2,http/1.11
t13d1516h2_8daaf6152771_d8a2da3f94cd8c137ad3980edc08...13h2,http/1.11
t13d1516h2_8daaf6152771_d8a2da3f94cdb82d63dcb32fdc95...13h2,http/1.11

Requests per day (60 days)

DayRequests 
2026-08-191
2026-08-231
2026-08-242
2026-08-282
2026-08-291
2026-08-301
2026-08-311
2026-09-021
2026-09-031
2026-09-071
2026-09-111
2026-09-131
2026-09-141
2026-09-151
2026-09-171
2026-09-201
2026-09-211
2026-09-231
2026-09-263
2026-10-011