> For the complete documentation index, see [llms.txt](https://docs.takionapi.tech/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.takionapi.tech/nudata.md).

# NuData

A NuData bypass without a browser. NuData scores behavior, so Takion generates the nds-pmd / x-src-nudetect-widgetdata  behavioral payload it expects and returns it ready to attach to your login or ch

{% hint style="info" %}
Check our example bundles in order to validate your implementation against our validate ones, with correct headers order, TLS and flow from our [**Github repo**](https://takionapi.tech/examples)
{% endhint %}

## **What is NuData?**

NuData is a security service that protects sensitive actions such as logins and payments, commonly found on platforms like Ticketmaster and Kohl's. It check user actions to detect fraudulent activity. 

### Detecting a NuData site <a href="#detecting-a-castle-site" id="detecting-a-castle-site"></a>

Protected websites usually expect a parameter, often named **`nds-pmd`**, though the name may vary.

<figure><img src="https://2720813823-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fn0x4RrnIfxXvmfh6rJHh%2Fuploads%2FJS5EcRbZ3gHKuEPFGTBx%2Fimage.png?alt=media&amp;token=469a63c7-fdc1-4083-a462-b6eaca7e769f" alt=""><figcaption></figcaption></figure>

In other cases it may be called as **`x-src-nudetect-widgetdata`**, like for the **`stc.mastercard.com`** website.

<figure><img src="https://2720813823-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fn0x4RrnIfxXvmfh6rJHh%2Fuploads%2Fci62fjozAcBrGB6HgsAn%2FScreenshot%202026-07-12%20at%2017.06.28.png?alt=media&amp;token=9e45bc7e-69e9-4b85-a0bf-3041bc7bea72" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
NuData scores logins, checkouts, and payments. It is a fraud gate, not a scraping wall. We take on these targets case by case. [Contact us first](https://takionapi.tech/contact) so we can confirm we can clear your specific flow before you build against it.
{% endhint %}

## Some websites using Datadome <a href="#some-websites-using-it" id="some-websites-using-it"></a>

Most of the tickets websites are using Incapsula to protect their website. Here are some examples of websites using Incapsula and the cookies/challenge they require:

| Website                                                                                                                     |
| --------------------------------------------------------------------------------------------------------------------------- |
| [ticketmaster.com](https://www.ticketmaster.com/) / [ticketmaster.sg](https://www.ticketmaster.sg/) (and other sub domains) |
| [kohls.com](https://www.kohls.com/)                                                                                         |
| [Mastercard](https://src.mastercard.com/)                                                                                   |
| ...                                                                                                                         |

## Our API <a href="#our-api" id="our-api"></a>

Takion generates the **`x-src-nudetect-widgetdata`** / **`nds-pmd`** (or whatever the website calls it) and returns it ready for your specific interaction.