Moderately protected sites - collection here typically needs residential or mobile IPs plus a real browser fingerprint. We index 37 moderate sites; the most common protection is Akamai (CDN/WAF), on about 62% of them. Reviewed July 2026.
| # | Site | Category | Protection observed |
|---|---|---|---|
| 1 | Costco costco.com | Retail & E-commerce | Akamai (CDN/WAF)Queue-it |
| 2 | Funda funda.nl | Real Estate & Property Listings | Akamai (CDN/WAF)reCAPTCHA |
| 3 | TikTok tiktok.com | Social Platforms | Akamai (CDN/WAF)hCaptcha |
| 4 | Adidas adidas.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 5 | Agoda agoda.com | Travel & Hospitality | Akamai (CDN/WAF) |
| 6 | Airbnb airbnb.com | Travel & Hospitality | Akamai (CDN/WAF) |
| 7 | AliExpress aliexpress.com | Online Marketplaces | Akamai (CDN/WAF) |
| 8 | Amazon amazon.com | Online Marketplaces | AWS WAF |
| 9 | Apartments.com apartments.com | Real Estate & Property Listings | Akamai (CDN/WAF) |
| 10 | Argos argos.co.uk | Retail & E-commerce | Akamai (CDN/WAF) |
| 11 | ASOS asos.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 12 | Autotrader autotrader.com | Automotive | Akamai (CDN/WAF) |
| 13 | AXS axs.com | Tickets & Live Events | Cloudflare (CDN/WAF) |
| 14 | Carrefour carrefour.fr | Retail & E-commerce | Cloudflare (CDN/WAF) |
| 15 | Craigslist craigslist.org | Classifieds | hCaptcha |
| 16 | Crunchbase crunchbase.com | Data & Business Intelligence | Cloudflare (CDN/WAF) |
| 17 | CVS cvs.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 18 | Domain domain.com.au | Real Estate & Property Listings | Akamai (CDN/WAF) |
| 19 | DoorDash doordash.com | Food Delivery | Cloudflare (CDN/WAF) |
| 20 | eBay ebay.com | Online Marketplaces | Akamai (CDN/WAF) |
| 21 | Grailed grailed.com | Online Marketplaces | Cloudflare (CDN/WAF) |
| 22 | Groupon groupon.com | Retail & E-commerce | Cloudflare (CDN/WAF) |
| 23 | H&M hm.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 24 | Kohl's kohls.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 25 | Live Nation livenation.com | Tickets & Live Events | Queue-it |
| 26 | Lowe's lowes.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 27 | Lululemon lululemon.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 28 | Macy's macys.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 29 | Newegg newegg.com | Retail & E-commerce | Cloudflare (CDN/WAF) |
| 30 | Rakuten rakuten.co.jp | Online Marketplaces | Akamai (CDN/WAF) |
| 31 | SHEIN shein.com | Retail & E-commerce | Cloudflare (CDN/WAF) |
| 32 | Snapchat snapchat.com | Social Platforms | hCaptcha |
| 33 | Temu temu.com | Online Marketplaces | Cloudflare (CDN/WAF) |
| 34 | Tesco tesco.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 35 | Ulta Beauty ulta.com | Retail & E-commerce | Akamai (CDN/WAF) |
| 36 | United Airlines united.com | Travel & Hospitality | Akamai (CDN/WAF) |
| 37 | X (Twitter) x.com | Social Platforms | Cloudflare (CDN/WAF) |
37 sites in the registry are rated Moderate. The most common protection among them is Akamai (CDN/WAF) (about 62% of them), then Cloudflare (CDN/WAF). Each site and its observed stack is listed below.
A CDN, WAF or challenge layer is present. How aggressively it challenges automated traffic varies by configuration and route. As a rule of thumb, Clean residential or mobile IPs generally pass; datacenter ranges are the usual failure point. This describes the network layer only, not a way to defeat any protection.
From public HTTP response signatures observed on each site's landing response, reviewed July 2026. A technology is listed only when a canonical signal was present.
Hand it to Data Works for clean, QA-checked data, or run it yourself on real 4G/5G carrier IPs from $4/GB.