Detect Maho

EcommerceCMS

Maho is a modern, open-source ecommerce platform forked from OpenMage, offering enhanced developer experience while maintaining Magento 1 compatibility.

Detection looks at cookies, script sources across 7 fingerprint rules among the site's public responses.

01

Websites using Maho

Loading website list…

02

Signal classes

PluginView evaluates public page signals in these classes when identifying Maho. Individual fingerprint rule bodies are proprietary and are not published.

  • Cookies
  • Script sources
03

Example public indicators for Maho

Illustrative indicators derived from public catalog metadata for Maho. A live scan may match additional proprietary rules beyond these examples.

  • maho_session
  • js/maho-autocomplete.js
  • js/maho-captcha.js
  • js/maho-dialog.js
  • js/maho-load-on-intent.js
  • js/maho-passkey-tools.js
  • js/maho-tree.js
04

What a detection means

Establishes
One or more public signals on the scanned page matched a known Maho signature (7 rules) at the time of the scan.
Does not establish
A sitewide install of Maho, an active vendor contract, exclusive use, or that Maho is still in place today.
05

How to check a site for Maho

  1. 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Maho signals.
  2. 2. PluginView reads only public responses (cookies, script sources) and scores them against the Maho signature set (7 rules).
  3. 3. Review the confidence score and text explanation for Maho on the results page.
06

Commonly implies

A confirmed Maho match also implies these technologies are present.

07

FAQ: detecting Maho

Can PluginView detect Maho without logging in?
Yes. PluginView only reads publicly accessible responses when checking for Maho — typically cookies, script sources. It does not bypass authentication or paywalls.
What category is Maho?
Maho is classified under Ecommerce, CMS in the PluginView directory.
How many fingerprint rules cover Maho?
This reference currently tracks 7 fingerprint rules across cookies, script sources. Individual rule bodies are proprietary and are not published.
What public signals suggest a site uses Maho?
Illustrative public indicators for Maho include maho_session; js/maho-autocomplete.js; js/maho-captcha.js. A live scan may match additional proprietary rules beyond these examples.