Download websites that use Incapsula

A site protected by a cloud web application firewall does not run the product in any ordinary sense. Traffic is pointed at the provider's network first, inspected there, and forwarded to an origin server the visitor never touches. Detecting Incapsula is therefore detecting a DNS and routing decision rather than a piece of software installed on a host, and the decision was usually made once, by an infrastructure team, and then left in place.

Imperva owns the service, and the product name and the vendor name have not matched for years. Names retire slowly on the web. Configuration, response headers and internal documentation keep an old brand alive long after the marketing has moved on, so the population we count under Incapsula is best understood as the sites still answering with the older fingerprint rather than as the vendor's customer base. Anyone sizing Imperva from this row will get a wrong answer. Anyone measuring how long a retired brand survives in live configuration will get a good one.

As of November 2026 the fingerprint appears on 48 sites, against a product line dating from 2011. A CDN service of this kind also does something unusual to the rest of a technology profile. An edge proxy terminates the connection, strips or rewrites origin headers and can serve cached HTML, which means the server software, the operating system hints and sometimes the framework behind it stop being visible to any scanner. For anyone building stack profiles from our data, a proxy detection is a warning label attached to every other field for that domain.

The question a downloadable list answers here is about coverage rather than about any one site. Which domains sit behind a filtering edge and which are exposed directly. Whether a sector or a country has moved protection to the network layer or still runs it on the origin. How much of the web still carries a fingerprint from a brand that no longer exists as a standalone offering, which works as a rough measure of how long configurations go untouched. A per-domain lookup returns a yes or a no about a host you already suspected. The list gives you the denominator, and arguments about security posture are almost always arguments about the denominator.