Zillow is the toughest property portal to scrape — Imperva anti-bot and a near-useless API cap. Here's what actually stops you and the setup that gets clean listing data.
Zillow runs Imperva/Incapsula (JS challenge + fingerprinting + IP blacklisting) and its official API is capped at roughly 1,000 calls/day with scraping prohibited. To collect at any scale you drive a real browser over US residential or mobile IPs — datacenter IPs are flagged on their ASN before the page renders. Match the fingerprint to the IP, pace like a human, and respect Zillow's terms and the law.
Zillow's defenses stack three layers. The IP layer (Imperva reputation) drops known datacenter and abusive ranges instantly. The challenge layer serves JavaScript puzzles a non-browser client can't solve. The fingerprint layer checks that your TLS/JA4 and browser signals match a real Chrome/Firefox. Beat one and the others still catch you — they're scored for consistency, exactly as described in the 2026 fingerprinting stack.
The official API won't save a data project either: ~1,000 calls/day is fine for spot lookups, useless for systematic listing or price-history collection, and the terms forbid scraping around it.
Zillow sits behind Imperva (Incapsula), which combines JavaScript challenges, browser/TLS fingerprinting, and IP reputation blacklisting. A datacenter IP is flagged on its ASN before the page even renders, and a raw HTTP client fails the JS challenge. You need a real browser engine arriving on a residential or mobile IP so both the network and client layers look like a genuine visitor.
Only for small volumes. Zillow's developer APIs are tightly capped — on the order of 1,000 calls per day — and the developer terms prohibit scraping and require respecting their anti-bot controls. For broader listing or price-history collection the API is not enough, which is why teams use browser automation over trusted IPs on the public site (within each site's terms and the law).
Residential or 4G/5G mobile IPs in the US. Their carrier/ISP ASNs carry the reputation Zillow's IP checks look for, and mobile IPs behind CGNAT are especially costly for any site to block. Datacenter IPs are the one type that reliably fails here.
Real US 4G/5G mobile + residential IPs — $4/GB, free endpoints, free rotation. The ASN reputation Imperva is looking for.