Imperva
Imperva (formerly Incapsula) is an enterprise CDN and web application firewall used for DDoS mitigation and request filtering. ScanMalware detects it from the visid_incap and incap_ses cookies and Imperva challenge pages.
A scan of an Imperva-protected site frequently captures a challenge or block page rather than origin content. Imperva is a protective layer and not an indicator of the underlying site’s trustworthiness.
Commonly deployed alongside Imperva
Of the 2,107 public scans where Imperva was detected, these are the technologies most often present on the same site. The share is the percentage of Imperva sites that also ran each one.
| Technology | Category | Share of Imperva sites |
|---|---|---|
| HSTS | wappalyzer | 54.17% |
| Google Tag Manager | wappalyzer | 32.78% |
| X-UA-Compatible | miscellaneous | 32.12% |
| jQuery | wappalyzer | 27.04% |
| JQuery | miscellaneous | 25% |
| Google Analytics | wappalyzer | 24.76% |
| Script | miscellaneous | 21.58% |
| Open-Graph-Protocol | miscellaneous | 20.3% |
| PoweredBy | miscellaneous | 18.64% |
| Google-Analytics | miscellaneous | 16.18% |
| MetaGenerator | miscellaneous | 15.84% |
| Microsoft ASP.NET | wappalyzer | 14.28% |
| PHP | wappalyzer | 12.81% |
| Cloudflare | wappalyzer | 8.4% |
How ScanMalware detects Imperva
Imperva is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that Imperva is present, but how it is being used. Open the full search interface for Imperva →
Recent public scans featuring Imperva
A rolling sample of recent public scans where Imperva was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| http://mooretravelbyscott.com/ | 2026-07-21 |
| 502 Bad Gateway http://kamikclearance.com/ | 2026-07-21 |
| 502 Bad Gateway http://kamik-1898.com/ | 2026-07-21 |
| Public Charge Rule - Information and Updates - Office of Immigrant Affairs https://oia.lacounty.gov/publiccharge/ | 2026-07-21 |
| Welcome! - Kadince https://bankfirstfs.kadince.com | 2026-07-21 |
| 502 Bad Gateway http://kamikdiscount.com/ | 2026-07-21 |
| https://mcprod.fahorro.com | 2026-07-21 |
| https://natlib.govt.nz | 2026-07-21 |
Frequently asked questions about Imperva
- Does using Imperva mean a website is unsafe?
- No. Imperva is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using Imperva can be perfectly safe or actively malicious.
- How many sites using Imperva has ScanMalware scanned?
- Imperva has been detected in 2,107 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with Imperva?
- Across scanned sites, Imperva is most often seen alongside HSTS, Google Tag Manager and X-UA-Compatible. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.