Skip to content

Latest commit

 

History

History
158 lines (124 loc) · 5.77 KB

README.md

File metadata and controls

158 lines (124 loc) · 5.77 KB

Datadome Bypass APIs

Be sure to join our Discord for a free trial key, questions and support.

Datadome logo

Datadome is a bot management system that protects websites from automated threats, including scraping, credential stuffing, and layer 7 (application layer) DDoS attacks.

It's known for its inefficiency in detecting and blocking bots, resulting in false positives and IP bans for legitimate users.

Therefore, it's advisable to have a robust proxy list to rotate IPs and avoid IP bans.

Table of Contents

How Datadome Works

In order to access a Datadome website under protection you may need on first join or after some requests to solve a challenge that will generate you a datadome cookie that will garant you the access to the website for a certain amount of time. So if you see that a webite has a datadome cookie, you can be sure that it's using Datadome.

Datadome cookie

Is required to use TLS when interacting with a Datadome website.

Challenge response

When you try to access a website protected by Datadome, you may receive a response with a status code 403 and a body containing a strange html, let's take a look into it:

<html>
    <head>
        <title>footlocker.pt</title>
    </head>
    <body style="margin:0">
        <p id="cmsg">Please enable JS and disable any ad blocker</p>
        <script data-cfasync="false">
            var dd = {
                'rt': 'i',
                'cid': 'AHrlqAAAAAMAxVzL7Hc0p40AWXJFuQ==',
                'hsh': 'A55FBF4311ED6F1BF9911EB71931D5',
                'b': 1239798,
                's': 17434,
                'host': 'geo.captcha-delivery.com'
            }
        </script>
        <script data-cfasync='false'>
            (function() {
                // ...
            }
            )();
        </script>
        <script data-cfasync="false" src="https://interstitial.captcha-delivery.com/i.js"></script>
    </body>
</html>

The imporant thing here is the dd dict, that is used in order to build the challenge URL. Based on the rt value you can already know what kind of challenge you are going to face:

  • i - interstitial
  • c - captcha slide

Challenges

Slide Captcha

The slide captcha is a challenge that requires you to solve a slide captcha (aka GeeTest) in order to get the datadome cookie. This challenge is the most common and is used by most of the websites protected by Datadome.

Datadome Slide Captcha

Interstitial

The newest challenge, based on device verification, is the interstitial. Based on the website settings, you may see just a blank page or the "Verify your device" text.

Datadome Interstitial

Some websites using it

Most of the tickets websites are using Incapsula to protect their website. Here are some examples of websites using Incapsula and the cookies/challenge they require:

Website
footlocker.pt (and all other domains)
hermes.com
ticketing.liverpoolfc.com
ticketing.manutd.com
tickets.mancity.com
seatgeek.com
...

Our API

Our API is designed to facilitate smooth and effortless navigation through Datadome-protected websites and solve all of their challenges.

Build the challenge URL

Endpoint https://datadome.takionapi.tech/build

Method POST

Body

{
    "html": "<html><head><title>footlocker.pt</title><style>#cmsg{animation: A 1.5s;}@keyframes A{0%{opacity:0;}99%{opacity:0;}100%{opacity:1;}}</style></head>...<scrip>var dd={'rt':'i','cid':'AHrlqAAAAAMAs_1XaN_7uEIAWXJFuQ==','hsh':'A55FBF4311ED6F1BF9911EB71931D5','b':1239798,'s':17434,'host':'geo.captcha-delivery.com'}</script>...</html>",
    // pass the content of the block html response
    "datadome": "...",
    // your session's datadome's cookie value
    "referrer": "https://..." 
    // The requested URL
}

Response

{
    "url": "https://geo.captcha-delivery.com/interstitial/?initialCid=...",
    "challenge_type": "interstitial" // the type of challenge found
}

Solve the challenge

No matter what challeng it is, one endpoint will handle and solve both!

After loading the challenge URL with your session, pass it to our API to either generate the payload for the cookie generation post, or directly solve the challenge and return the datadome cookie.

Check the documentation for more information.

Endpoint https://datadome.takionapi.tech/solve

Method POST

Body

{
    "html": "...",
    // the HTML of the challenge page
}

Response (the request to execute with your session for the cookie generation)

{
    "url": "https://geo.captcha-delivery.com/...",
    "payload": "...",
    "headers": {...},
    "method": "POST"
}

Example

Here's an example implementation of our Datadome API in Python:

Get also a free API key to start using our API.