Download websites that use ThreatMetrix

About ThreatMetrix

Fraud prevention software is invisible to the customer by design and, unlike an analytics tag, it usually runs only where money or an account is at stake. ThreatMetrix belongs to that class of Browser fingerprinting tooling. A site loads a profiling script that collects device and behavioural signals during a login, a signup or a payment, and the resulting risk score decides whether the transaction proceeds, gets challenged or gets refused.

ThreatMetrix is a LexisNexis Risk Solutions product, licensed as Proprietary, with a lineage reaching back to 2005. Age is unusually informative for this category. Device intelligence works by comparing what it sees now against what it has seen before, across every customer feeding the same network, so a platform that has been accumulating that history for a long time holds an asset a new entrant cannot simply buy. A site that adopts one is buying access to other people's fraud history as much as it is buying software.

As of October 2026 the fingerprint appears on 63 sites. Site counts understate this kind of product badly, for a structural reason. The script tends to run on authentication and checkout paths rather than on the marketing pages a crawler reaches first, and larger deployments often serve it from a customer-specific hostname that carries no obvious vendor signature. A public crawl sees the deployments that expose the tag on a reachable page and misses an unknown share of the rest. Treat the figure as a floor for the installed base.

What the presence of a fraud and identity platform says about a site is worth more than the count. A site running one is transacting at a volume where fraud losses justify a commercial contract, which is a useful qualifier before anyone picks up a phone. The population skews toward financial services, lending, insurance, ticketing, marketplaces and anything with an account takeover problem. Vendors selling competing risk engines use the list as a displacement target. Vendors selling adjacent layers, from identity verification through to chargeback recovery, use it as an account list, because a company that already buys one layer of risk tooling has a budget line the next one can be attached to.

A lookup on one domain tells a salesperson which vendor a single account already uses. The export answers the strategic version of the question: which segments have consolidated on ThreatMetrix, which domains added or dropped the fingerprint since the previous release, and how detections distribute across the industries and country domains that matter in a given territory. Movement between releases is the part that repays attention. Risk vendors are replaced quietly, without a press release, and a tag that stops appearing is often the first public evidence that a contract ended.