Technology and Infrastructure Fingerprints

Self-labelled pages and endpoints that emit one technology or CDN/WAF signature set each, exercising Sitebulb's Wappalyzer technology detection and header-based CDN/WAF identification without any real stack installed.

Fixtures for Sitebulb’s two detection subsystems. No real CMS, framework, CDN, or WAF is installed anywhere on this site — every signature is an inert copy, and every page says so in visible text.

Families:

• Technology pages: one page per technology, each isolating a single evidence channel — generator meta tags (WordPress, Gatsby), response headers (Drupal, Next.js), a cookie name (Laravel), script URLs (WordPress, jQuery), a JS global set only after rendering (React), and an HTML comment (Squarespace). Because Sitebulb’s two Wappalyzer pipelines consume different evidence channels, a page going undetected under one pipeline is itself a valid, documentable result.
• Technology helper assets: three inert stub subresources whose URLs carry the signature (/wp-content/ paths and a versioned jQuery filename). They return 200 so they never pollute broken-resource reporting, and they stay out of every sitemap and manifest bucket.
• CDN/WAF signature responses: one endpoint per provider whose response headers and cookies copy that provider’s signatures (Cloudflare, Fastly, CloudFront, Akamai, Imperva, DataDome, F5 BIG-IP). CDN/WAF detection is header-only, so these fixtures work for both HTML-only and Chrome crawls. A multi-provider response proves provider flags combine, and a 403 Cloudflare challenge page exercises the WAF-block logging path.

The multi-provider and 403 fixtures live in the safe manifest only; every other route in the group sits in the default sitemap.

Fixtures in this category

• Technology signals — WordPress — tech-wordpress (safe)
• Technology signals — Drupal (header only) — tech-drupal (safe)
• Technology signals — Next.js (header only) — tech-nextjs (safe)
• Technology signals — React (JS global only) — tech-react (safe)
• Technology signals — Squarespace (HTML comment only) — tech-squarespace (safe)
• Technology signals — Laravel (cookie only) — tech-laravel (safe)
• Technology signals — jQuery (script src only) — tech-jquery (safe)
• Technology signals — Gatsby — tech-gatsby (safe)
• CDN/WAF signatures — Cloudflare — cdnwaf-cloudflare (safe)
• CDN/WAF signatures — Fastly — cdnwaf-fastly (safe)
• CDN/WAF signatures — Amazon CloudFront — cdnwaf-cloudfront (safe)
• CDN/WAF signatures — Akamai — cdnwaf-akamai (safe)
• CDN/WAF signatures — Imperva — cdnwaf-imperva (safe)
• CDN/WAF signatures — DataDome — cdnwaf-datadome (safe)
• CDN/WAF signatures — F5 BIG-IP — cdnwaf-f5-big-ip (safe)
• CDN/WAF signatures — multiple providers — cdnwaf-multi-provider (moderate)
• CDN/WAF signatures — Cloudflare 403 challenge — cdnwaf-cloudflare-block-403 (moderate)

Back to the fixture index