Our solution automates reese84 payload generation, providing seamless access to Incapsula-protected websites with minimal latency.

# Bypassing Incapsula Protection: Step-by-Step

  1. Load website: Load website with a valid browser environment and identify the Incapsula script.
  2. Payload Generation: Utilize our API to generate a valid reese84 payload.
  3. Post payload: Post the generated payload to receive the authenticated reese84 cookie, granting access to the protected resource.

# Application resources

Endpoint: https://imperva-incapsula-reese84.p.rapidapi.com

This endpoint enables the client to interact with Incapsula payload generation.

# Authentication Headers

  • Content-Type: application/json
  • X-RapidApi-Key: <api key> - get your API key from Rapidapi.com

# 1. How to identify Incapsula script

After accessing the target website, open your browser’s inspector tools and navigate to the network tab. You should see a request (POST) sent to a URL similar to:

https://example.com/some-random-words-here?d=www.example.com

This is the script tag. Each response should return JSON data containing a key named "token".

# 2. Generating the payload

Once the reese84 script is identified and loaded, send its URL to our API to generate the appropriate payload for the cookie generation POST request.

POST https://imperva-incapsula-reese84.p.rapidapi.com/solve

# Request:

const url = 'https://imperva-incapsula-reese84.p.rapidapi.com/solve';
const options = {
	method: 'POST',
	headers: {
		'Content-Type': 'application/json',
		'X-RapidAPI-Key': 'YOUR KEY',
		'X-RapidAPI-Host': 'imperva-incapsula-reese84.p.rapidapi.com',
	},
	body: {
    // pass script URL from your website
		scriptUrl: 'https://www.ticketmaster.de/epsf/eps-d',
		userAgent: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36'
	}
};

try {
	const response = await fetch(url, options);
	const result = await response.text();
	console.log(result);
} catch (error) {
	console.error(error);
}
curl --request POST \
	--url https://imperva-incapsula-reese84.p.rapidapi.com/solve \
	--header 'Content-Type: application/json' \
  --header 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36' \
	--header 'X-RapidAPI-Key: FILL_YOUR_API_KEY_HERE' \
	--data '{	"scriptUrl": "https://www.ticketmaster.de/epsf/eps-d"}'
import requests

url = "https://imperva-incapsula-reese84.p.rapidapi.com/solve"

payload = {
	"scriptUrl": "https://www.ticketmaster.de/epsf/eps-d",
	"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
}
headers = {
	"Content-Type": "application/json",
	"X-RapidAPI-Key": "YOUR KEY",
}

response = requests.post(url, json=payload, headers=headers)

print(response.json())

# Response:

{
  "payload": {
    "solution": {
      "interrogation": {
        "p": "/xDXRQ4tCmcM+SQWA98I6f3AOvIhGQUA6W4K8Ab8Gvw+/EsE...",
        "st": 1730279221,
        "sr": 111513655,
        "cr": 612670446,
        "og": 1
      },
      "version": "beta"
    },
    "old_token": null,
    "error": null,
    "performance": {
      "interrogation": 280
    }
  }
}

# 3. Send Payload to origin host

After receiving the payload object, send it back to the origin server using the POST method. Append ?d=www.example.com to the URL.

# 3. Ensuring Successful operation

Our API generates the necessary payload for the reese84 cookie. Your responsibility includes:

  • Handling the subsequent POST request to the website
  • Managing all further interactions with the website to complete the cookie retrieval process.

To ensure seamless navigation and payload posting:

  • Utilize HTTP/2 as the protocol
  • Provide a valid set of request headers that accurately mimic those of a legitimate browser, facilitating successful interaction with the website.