Sign in
← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
CN

Bytespider zhanzhang.toutiao.com

 · Bytespider / Android Human
AiBot
Policy: rate-limit-ai
Probability
0 %
Confidence
99 %
Risk Profile
VeryLow
Threat
None
Hit Count
8
Last Seen
22s ago
Network Locale Headers Tool Transport Session Quality
Drift vs
46.1%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/1.1
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Flagged
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 1034 1034 0.09 (ua family, priority, header case pattern) 06:44:18
websocket-upgrade 36 36 0.32 (cache control pragma, header order hash, header case pattern) 05:49:50
navigation 32 32 0.62 (ua family, upgrade insecure requests, priority) 05:33:32
signalr-negotiate 38 38 0.51 (ua family, priority, header order hash) 05:26:05
sub-resource 141 141 0.49 (ua family, priority, header case pattern) 05:25:35
5 modes across 1281 observations. See composite browser-mode fingerprints.
Endpoints Visited (1) Click to expand · stats unavailable
# Path
1 /stylobot/hub
Raw Requests (8) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
05:26:08 GET /stylobot/hub 200 100 % 50 % VeryHigh rate-limit-ai 12.2ms
05:26:07 GET /stylobot/hub 200 100 % 50 % VeryHigh rate-limit-ai 19.1ms
05:04:18 GET /stylobot/hub 200 100 % 50 % VeryHigh rate-limit-ai 5016.4ms
21:50:53 GET /stylobot/hub 200 100 % 50 % VeryHigh rate-limit-ai 5018.6ms
16:29:24 GET /stylobot/hub 200 100 % 50 % VeryHigh rate-limit-ai 12.1ms
16:29:23 GET /stylobot/hub 200 100 % 50 % VeryHigh rate-limit-ai 11.6ms
16:29:20 GET /stylobot/hub 200 100 % 50 % VeryHigh rate-limit-ai 11.8ms
16:26:09 GET /stylobot/hub 200 100 % 50 % VeryHigh rate-limit-ai 5018.8ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)

Analysis

Bytespider zhanzhang.toutiao.com on /stylobot/hub - caught by Known AI training bot: Bytespider (ByteDance), Known bot pattern: Bytespider, RFC 6455 compliant WebSocket upgrade (valid key, version ...

Detection Signals

  • • Known AI training bot: Bytespider (ByteDance)
  • • Known bot pattern: Bytespider
  • • RFC 6455 compliant WebSocket upgrade (valid key, version 13, matching origin)
  • • No referrer on subsequent request
  • • WebSocket upgrade - header profile expected

Detector Contributions (18 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 97 % bot likelihood (307 features)
 +0.941 0.4
AiScraper
Known AI training bot: Bytespider (ByteDance)
 +0.950 0.0
UserAgent
Known bot pattern: Bytespider
 +0.900 0.6
Heuristic
Heuristic model (early): 79 % bot likelihood (21 features)
 +0.574 0.1
TransportProtocol
RFC 6455 compliant WebSocket upgrade (valid key, version 13, matching origin)
 -0.200 0.0
Behavioral
No referrer on subsequent request
 +0.150 0.1
Ip
IP appears normal: 180.184.92.xxx
 -0.150 0.0
Header
WebSocket upgrade - header profile expected
 -0.150 0.1
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
Http2Fingerprint
Using HTTP/1.1 instead of HTTP/2 (HTTP/2 rate: 93 % over 199 samples)
 +0.093 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.5
VerifiedBot
No known bot UA pattern
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

request

protocol HTTP/1.1
accept_encoding gzip, br

risk

justification Classified AiBot (probability 1.00, confidence 0.50)
friendly_pin_trace not-applicable:botType=AiBot,yamlType=AiBot,botName=Bytespider zhanzhang.toutiao.com

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

55cd5a710c0c442d865d8604a99cbd6d 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Signature: bf6yr7XtmWRUxXu_aTF2pQ | Processing: 12ms | Country: CN | UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/) | First seen: 2026-07-14 16:26:09 UTC