Download websites that use MaxMind

About MaxMind

MaxMind answers a question that almost every commercial site eventually asks about a visitor. Where is this person, and should this transaction be trusted? The company has been turning network addresses into locations and risk scores since 2002, and the resulting databases end up inside web servers, checkout flows, advertising systems, content rules and login screens.

The consequence for detection is that most of that work is invisible from outside. A geolocation lookup happens on the server, in a library reading a local database file, and leaves nothing in the page. What a crawler can observe is the part that deliberately runs in the browser, the device tracking script used for fraud scoring at signup and payment. Webatla is therefore measuring one specific use of MaxMind, the risk scoring one, rather than the whole footprint of the data.

As of September 2026 we detect MaxMind on 1,562 sites, and the version data reinforces the point. Only 2 script variants appear across those domains, with installs clustering on 2.1. Narrow spread like that is the signature of a script served and updated by the vendor rather than copied into a project. The practical effect is that the version tells you nothing about the age of the site around it, which is the opposite of what a version number means for a self-hosted library. A page built years ago and a page built last month will report the same thing.

MaxMind licenses the data on a Proprietary basis and also publishes a reduced free edition, which is why the name turns up in hobby projects and in payment stacks alike. The free tier matters when reading any count of this technology, because it removes the usual assumption that every detection represents a paying account.

Set against those limits, the domains where the browser-side script does appear are a precise population rather than a vague one. A site does not fingerprint devices at checkout unless it has money moving through it and has already lost some to fraud or chargebacks. A list of such domains is a map of commercial sites that treat risk as an operational problem, useful to fraud and identity vendors sizing a market, to payment providers judging where their competition is already embedded, and to privacy researchers who want to know which categories of site profile a visitor's device before taking payment. Filed by webatla under Browser fingerprinting, the marker is one of the few that indicates not just what a site runs but what it is defending.