Fix provider_name examples to show lowercase values

The provider_name field returns lowercase strings like "nordvpn" and
"surfshark", not pretty-cased names like "NordVPN". Updated JSON examples
and descriptions across GeoIP and minFraud documentation.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: horgh

content/geoip/docs/databases/anonymous-plus.md

@@ -151,8 +151,8 @@ These are named `GeoIP-Anonymous-Plus-Blocks-IPv4.csv` and
         <td>provider_name</td>
         <td>string</td>
         <td>
-          The name of the VPN provider (e.g., NordVPN, Surfshark, etc.)
-          associated with the network.
+          The name of the VPN provider (e.g., <code>nordvpn</code>,
+          <code>surfshark</code>) associated with the network.
           <br />
           Please note that MaxMind identifies a subset of VPN providers. A
           current list of VPN providers identified in the Anonymous Plus

content/geoip/docs/web-services/responses.md

@@ -248,7 +248,7 @@ only.
   "is_residential_proxy": true,
   "is_tor_exit_node": true,
   "network_last_seen": "2025-01-15",
-  "provider_name": "NordVPN"
+  "provider_name": "nordvpn"
 }
 ```
 
@@ -320,7 +320,7 @@ only.
   {{</ geoip-schema-row >}}
 
   {{< geoip-schema-row key="provider_name" valueType="string" insights="true">}}
-  The name of the VPN provider (e.g., NordVPN, Surfshark, etc.) associated with the network.
+  The name of the VPN provider (e.g., `nordvpn`, `surfshark`) associated with the network.
 
   Please note that MaxMind identifies a subset of VPN providers. A current list of VPN providers identified in the Anonymous Plus database is available on request.
 
@@ -1412,7 +1412,7 @@ request.
     "is_residential_proxy": true,
     "is_tor_exit_node": true,
     "network_last_seen": "2025-01-15",
-    "provider_name": "NordVPN"
+    "provider_name": "nordvpn"
   },
   "traits": {
     "ip_address": "1.2.3.4",

content/geoip/release-notes/2025.md

@@ -130,7 +130,7 @@ We recommend updating your integrations to use the new `anonymizer` object, whic
 | -------------------------------- | -------------------------------- |
 | `anonymizer/confidence`                       | A score ranging from 1 to 99 that represents our percent confidence that the network is currently part of an actively used VPN service.| 
 | `anonymizer/network_last_seen`                | The last day that the network was sighted in our analysis of anonymized networks. This is in the ISO 8601 date format (YYYY-MM-DD). |
-|  `anonymizer/provider_name`                  | The name of the VPN provider (e.g., NordVPN, Surfshark, etc.) associated with the network. |
+|  `anonymizer/provider_name`                  | The name of the VPN provider (e.g., `nordvpn`, `surfshark`) associated with the network. |
 
 Client APIs have been updated to reflect this change, which applies to the following web services: 
 - GeoIP Insights

content/minfraud/release-notes/2025.md

@@ -134,7 +134,7 @@ We recommend updating your integrations to use the new `anonymizer` object, whic
 | -------------------------------- | -------------------------------- |
 | `anonymizer/confidence`                       | A score ranging from 1 to 99 that represents our percent confidence that the network is currently part of an actively used VPN service.| 
 | `anonymizer/network_last_seen`                | The last day that the network was sighted in our analysis of anonymized networks. This is in the ISO 8601 date format (YYYY-MM-DD). |
-|  `anonymizer/provider_name`                  | The name of the VPN provider (e.g., NordVPN, Surfshark, etc.) associated with the network. |
+|  `anonymizer/provider_name`                  | The name of the VPN provider (e.g., `nordvpn`, `surfshark`) associated with the network. |
 
 Client APIs have been updated to reflect this change, which applies to the following web services: