Tagged: imperva

Imperva Incapsula bot detection: the ___utmvc cookie and reese84 token

Traces the cookies Imperva (formerly Incapsula) keeps in the browser: the ___utmvc RC4 cookie, the reese84 sensor token, and the visid_incap and incap_ses session pair, and how the layers fit together. Notes documented versus inferred throughout.

imperva anti-bot cookies bot-detection

Mon, May 18, 2026 · 24 min read

Imperva's reese84 sensor: what the obfuscated payload collects

A walk through Imperva's reese84 client sensor: the obfuscated JavaScript, the device and environment telemetry the payload gathers, the interrogation endpoint it POSTs to, and how the signed token is minted and renewed.

imperva anti-bot reverse-engineering fingerprinting

Sun, May 17, 2026 · 21 min read