[/tools/bot-detectors/imperva-incapsula]

imperva (incapsula)

imperva bot defense (formerly incapsula). loader is shipped from each protected origin under /_Incapsula_Resource?SWJIYLWA=..., not a public cdn. heavy emphasis on tls/http fingerprinting upstream of the js layer.

  • imperva loader (geico tenant)

    [ok]

    https://www.geico.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=641377855

    last ran
    2026-05-19 22:32 utc
    (2d ago)
    last updated
    2026-05-19 22:32 utc
    (2d ago)
    size
    82.7kb
    sha256
    03e30166c596
    apis touched
    26
    26 raw
    bot tells
    19
    sinks
    0
    0 leaked
    hazards
    0
    structural
    0
    anti-debug
    0
    L3/L4 hazards
    consistency
    0
    cross-checks
    providers
    0

    categories probed (4)

    click a row to drill into every api the script probes in that category.

    • [+] headless-tells9 apis · 9 tells · 19 hits
      • [+] processhigh · bot-tell×7
        details + source hits (7)
      • [+] __nightmarehigh · bot-tell×1
        details + source hits (1)
      • [+] _phantomhigh · bot-tell×1
        details + source hits (1)
      • [+] _Selenium_IDE_Recorderhigh · bot-tell×1
        details + source hits (1)
      • [+] callPhantomhigh · bot-tell×1
        details + source hits (1)
      • [+] domAutomationhigh · bot-tell×1
        details + source hits (1)
      • [+] domAutomationControllerhigh · bot-tell×1
        details + source hits (1)
      • [+] requirehigh · bot-tell×1
        details + source hits (1)
      • [+] globalmedium · bot-tell×5
        details + source hits (5)
    • [+] wasm1 apis · 0 tells · 1 hits
      • [+] WebAssemblylow×1
        details + source hits (1)
    • [+] events1 apis · 0 tells · 1 hits
      • [+] *.datainfo×1
        details + source hits (1)
    • [+] introspection1 apis · 0 tells · 5 hits
      • [+] *.toStringlow×5
        details + source hits (5)

    bot-detection tells (9)

    strong indicators of bot-detection intent. drill into the categories section below to inspect description, evasion notes, and source snippets for any tell.

    • process ×7
    • __nightmare ×1
    • _phantom ×1
    • _Selenium_IDE_Recorder ×1
    • callPhantom ×1
    • domAutomation ×1
    • domAutomationController ×1
    • require ×1
    • global ×5