If you have noticed a burst of visits with the referrer www.aocr.org in GA4, PostHog, Plausible, Umami, Fathom, or Cloudflare, you are not alone. The short version: the referrer is forged. AOCR is not involved, and the fingerprint points to a likely ByteDance crawler stack. Who operates it is not proven.

This post adapts the findings of Tin Analytics, "Getting traffic from aocr.org? That's ByteDance crawling your website" (29 Oct 2026).

What people are seeing

Since about 24 Sep 2026, many sites show visits with the referrer www.aocr.org (American Osteopathic College of Radiology).…