Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations61 days until leaf cert expires — 2 issues to addressREVIEW
Certificate validity
Recommended actions
- Submit your domain to hstspreload.org to be added to the Chrome preload list
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryCloudflareREVIEW
A+DNS Records2 A records, 92 ms lookupPASS
| A | 104.17.91.187, 104.17.92.187 |
| AAAA | 2606:4700::6811:5bbb, 2606:4700::6811:5cbb |
| CNAME | — |
| NS | yolanda.ns.cloudflare.com, jerry.ns.cloudflare.com |
| MX | 1 smtp.google.com |
| TXT | apple-domain-verification=yMRAjA0cp0ZxAXJO google-site-verification=ULhWgbGcguDpe6LuicAUc0CpIkFGccp1YmucGWoeut4 MS=ms42818833 elevenlabs=17AAcaYzHPb8_RC2_vYhbbaZLnH7xTDwJzyeWsbawlI openai-domain-verification=dv-G88hh2dhtm5VMPUchR7fh0l2 zapier-domain-verification-challenge=6da904b8-8498-4ea6-bc47-a7d3e3761143 _fdv10kvw0c1o5okbdzpuy8jpqmx3sa8 status-page-domain-verification=m19bvpv5sk0s google-site-verification=rwNRWYjcqZUsYDG1huk_dIsBRCfOesjoHPT5wh4_5lg adobe-idp-site-verification=67b8fd17615e71f28b3fc9b31fa84e8671d0fc28c4a80c23cef3... stripe-verification=e499b7aac3e600c9cda9629ef657da9a1ea6cd57ce5e7e138cdeeff98419... onetrust-domain-verification=99a8a3a51efe4a8fbd72bd2e15a76f1e google-site-verification=125dhZzE7NHja1SJMBfKB-vGsx-WIdbQlVFXzuzUINU jetbrains-domain-verification=6wsnrpm2pm69y3g6fkvkl2q7p google-site-verification=4S-EduW2OFChAhn0kW_SjNR8vrLW_kQQsWp7ZuXn6Xk hubspot-developer-verification=MzVhYTQwYmUtN2UyZS00MGE4LWJlN2EtMzQ0NGQwNmQwNTg2 zoom-domain-verification=ZOOM_verify_11b35b16cffa4c4894dae1d52a2ba70d h1-domain-verification=Xb9onaruo7KoR9XNxCyu9vUNz7rPj4uYMiteXKXLWjYs1Sy4 google-site-verification=J2I6jE_EJoX1m4waFuwZdKBpo7HLDNQKMfsvDUB2R4k atlassian-domain-verification=J3f6YdOOu6/tNWzA7xI39Nqm5B5qOZ0ayDbcEHv5nntPWOkwTU... Probely=a59314eb-85a7-45be-b13b-52794692a2b2 google-site-verification=7O-Er1i7KamWdCyhOsZC2dhVEHqNxGWgrBkQ-CgOFXA SPF v=spf1 redirect=_hspf.hubspot.com pinnacle-domain-verification-zeavd3=8dL9cowZvkf90tnJid2AfYQ1x _y7h71d1xtbahmuluh7qbx00gpvwvakj yahoo-verification-key=FYzeP6zciEK4qeqdappjx5ric/+1bc0Qor1r7EncEDM= smartsheet-site-validation=AacCig3iKBx3y4SHCYU0WdrlNTIIBX0D atlassian-domain-verification=znAKxFvnc6Sp4Vrf/Q8BIiqYFzh8awjMd8bRRibzNLriS6CnZy... google-site-verification=34o128itK1GOuGXGt8QI8801Nj5iRn0bfxAsfokLjOY DirectFedAuthUrl=https://hubspot.okta.com/app/hubspot_globalincentivessolutions_... google-site-verification=kJC6kA1mklSsAWS9kJ--0uRIdsMfupq6NoM3Jf2udf4 google-site-verification=ABe5u8RlH_DrBbo_5ldvZW2glM-SCyFy-bAirhxNjic canva-site-verification=2q1KYRxYvE35Tv1_-IhwKQ ecostruxure-it-verification=4069a037-ab55-4d70-9b8b-c7079f138604 figma-domain-verification=9fe09b7e073cb8caaa774e86e7765ca738b606b9b779da24326deb... jamf-site-verification=_w9STFpd00fVWflCPBYyjw openai-domain-verification=dv-tkdJ2BeBSodzZLfRQMyFwfp7 google-site-verification=P7ETKNIUHAbZHGHRwCOz3PZtuNT3JQsqGG-Ts73Ghrc zoom-domain-verification=1bd4b6dc-56ce-4215-8de0-5543d26ced6f google-site-verification=0msnYMjxgKXxDJXEIP6WB4AA2HVYl6Sz2Cy541f4ono cursor-domain-verification-rwk4xw=OZwu8mpJLbNba7XK1N5NgByXg google-site-verification=J9pq_P2VWxNeuYsXn4sCdHCCTcnYPMGEjt0EjVwA85g detectify-verification=46f357acabb7675925ab09872da42f0e atlassian-domain-verification=9kU4xvGQ0TxzwX3dE2ZFQB4GupiUht3zfn/4MpU9qfoo9Ey6Pt... notion-domain-verification=rKp4ejOtXzT56pUPhDP055mlhuyk1WnV6sLXocG3yh1 perplexity-ai-domain-verification-8pz9q0=aqH5i42XX8tt9M9RUNxN3p5E0 google-site-verification=hN2qgnvz-VyYXBoCdrN1ZU8Ye8F83DmhBJM2C0j43OE facebook-domain-verification=v0z7wt3tvx72qwt80eu2sf2z7zb9yi |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 276 ms totalPASS
https://hubspot.com
62 ms · HTTP/1.1
https://www.hubspot.com/
214 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://hubspot.com | 301 | 62 ms | HTTP/1.1 | cloudflare |
| 2 | https://www.hubspot.com/ | 200 | 214 ms | HTTP/1.1 | cloudflare |
See the visual redirect chain in the HTTP Probe tab →
A+IPv6 ReadinessIPv6 reachable (17 ms)PASS
A+Crawlabilityrobots.txt present, sitemap with 3131 URLsPASS
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
User-agent: *
Disallow: /wt-assets/static-files/mktg-analytics
Disallow: /_hcms/iplookup
Disallow: /_hcms/perf
Disallow: /meetings
Disallow: /raven/static-3.4
Disallow: /react-utils/static-2.40
Disallow: /jquery-libs/static-1.47
Disallow: /styled-components/static-1.3
Disallow: /react-select-plus/static-1.18
Disallow: /ZeroClipboard/static-1.6
Disallow: /raven-hubspot/static-1.43
Disallow: /PatternValidationJS/static-1.55
Disallow: /Reagan/static-6.27
Disallow: /jasmine/static-3.48
Disallow: /react-select-plus/static-1.21
Disallow: /atom/static-1.28
Disallow: /HublyticsTrackerJS/static-3.23
Disallow: /HublyticsTrackerJS/static-3.24
Disallow: /HubStyleTokens/static-2.81
Disallow: /react-redux/static-5.3
Disallow: /react-select-plus/static-1.25
Disallow: /icons/static-2.133
Disallow: /hub-http/static-1.158
Disallow: /react-redux/static-5.4
Disallow: /MeetingsLib/static-1.1167
Disallow: /salesImages/static-1.378
Disallow: /jasmine-runner/static-1.14
Disallow: /react/static-6.15
Disallow: /jasmine/static-3.49
Disallow: /reselect/static-2.5
Disallow: /transmute/static-1.85
Disallow: /MeetingsBase/static-1.1538
Disallow: /timezone-utils/static-2.29
Disallow: /I18n/static-7.192
Disallow: /enviro/static-3.70
Disallow: /Baldric/static-1.71
Disallow: /tracking-pixels/static-1.8
Disallow: /redux-thunk/static-2.1
Disallow: /urlinator/static-1.55
Disallow: /atom/static-1.31
Disallow: /react-utils/static-2.42
Disallow: /UIComponents/static-2.882
Disallow: /MeetingsPublic/static-1.2503
Disallow: /PortalIdParser/static-1.29
Disallow: /pickadate/static-1.6
Disallow: /StyleGuideUI/static-3.98
Disallow: /MeetingsLib/static-2.226
Disallow: /usage-tracker-core/static-1.65
Disallow: /I18n/static-7.204
Disallow: /PatternValidationJS/static-1.60
Disallow: /timezone-utils/static-2.30
Disallow: /salesImages/static-1.370
Disallow: /immutable/static-1.11
Disallow: /raven-hubspot/static-1.51
Disallow: /I18n/static-7.237
Disallow: /HubStyleTokens/static-2.86
Disallow: /MeetingsLib/static-2.140
Disallow: /jasmine-runner/static-1.15
Disallow: /q/static-4.11
Disallow: /Baldric/static-1.73
Disallow: /StyleGuideUI/static-3.100
Disallow: /MeetingsPublic/static-1.2825
Disallow: /HubStyle/static-2.309
Disallow: /MeetingsBase/static-1.1835
Disallow: /classnames/static-2.3
Disallow: /jasmine/static-3.50
Disallow: /atom/static-1.30
Disallow: /PatternValidationJS/static-1.56
Disallow: /Reagan/static-6.31
Disallow: /MeetingsBase/static-1.1723
Disallow: /HubStyleTokens/static-2.87
Disallow: /redux/static-3.6
Disallow: /PortalIdParser/static-1.27
Disallow: /q/static-4.12
Disallow: /react-redux/static-5.5
Disallow: /raven-hubspot/static-1.46
Disallow: /react-dom/static-6.4
Disallow: /salesImages/static-1.367
Disallow: /transmute/static-2.8
Disallow: /ui-images/static-2.106
Disallow: /common_assets/static-2.198
Disallow: /urlinator/static-1.54
Disallow: /HubStyleTokens/static-2.93
Disallow: /tracking-pixels/static-1.10
Disallow: /usage-tracker/static-1.76
Disallow: /HubStyleTokens/static-2.88
Disallow: /UIComponents/static-2.1132
Disallow: /usage-tracker-core/static-1.72
Disallow: /timezone-utils/static-2.36
Disallow: /Reagan/static-7.4
Disallow: /ui-addon-avatars/static-1.1307
Disallow: /HubStyle/static-2.366
Disallow: /salesImages/static-1.383
Disallow: /react-utils/static-2.45
Disallow: /UIComponents/static-2.1109
Disallow: /jasmine/static-3.51
Disallow: /MeetingsBase/static-1.1796
Disallow: /MeetingsPublic/static-1.2796
Disallow: /raven-hubspot/static-1.48
Disallow: /usage-tracker/static-1.64
Disallow: /MeetingsLib/static-2.85
Disallow: /HublyticsTrackerJS/static-3.27
Disallow: /react-utils/static-2.41
Disallow: /icons/static-2.128
Disallow: /styled-components/static-1.4
Disallow: /HubStyle/static-2.348
Disallow: /I18n/static-7.210
Disallow: /I18n/static-7.270
Disallow: /transmute/static-2.6
Disallow: /Baldric/static-1.80
Disallow: /icons/static-2.122
Disallow: /I18n/static-7.233
Disallow: /ui-images/static-2.105
Disallow: /MeetingsPublic/static-1.3073
Disallow: /StyleGuideUI/static-3.109
Disallow: /Reagan/static-7.12
Disallow: /MeetingsBase/static-1.1714
Disallow: /MeetingsPublic/static-1.2718
Disallow: /urlinator/static-1.59
Disallow: /MeetingsBase/static-1.2082
Disallow: /HubStyle/static-2.394
Disallow: /salesImages/static-1.382
Disallow: /HubStyle/static-2.402
Disallow: /ui-addon-avatars/static-1.1494
Disallow: /UIComponents/static-2.1282
Disallow: /ui-addon-avatars/static-1.1461
Disallow: /MeetingsPublic/static-1.3018
Disallow: /common_assets/static-2.197
Disallow: /icons/static-2.130
Disallow: /Reagan/static-7.9
Disallow: /q/static-3.28
Disallow: /ui-images/static-2.92
Disallow: /hub-http/static-1.137
Disallow: /I18n/static-7.198
Disallow: /redux/static-3.7
Disallow: /MeetingsBase/static-1.1591
Disallow: /HubStyle/static-2.344
Disallow: /HubStyle/static-2.315
Disallow: /HeadJS/static-2.84
Disallow: /ui-addon-avatars/static-1.1104
Disallow: /UIComponents/static-2.933
Disallow: /ui-addon-avatars/static-1.1051
Disallow: /PatternValidationJS/static-1.74
Disallow: /UIComponents/static-2.1046
Disallow: /MeetingsPublic/static-1.2732
Disallow: /ui-addon-avatars/static-1.1121
Disallow: /react-dom/static-6.5
Disallow: /HubStyle/static-2.596
Disallow: /MeetingsLib/static-2.875
Disallow: /MeetingsPublic/static-1.3500
Disallow: /react/static-6.16
Disallow: /react-input-autosize/static-2.7
Disallow: /react/static-6.14
Disallow: /HubStyle/static-2.313
Disallow: /hublabs-core/static-4.9
Disallow: /MeetingsBase/static-1.1682
Disallow: /ui-addon-avatars/static-1.1107
Disallow: /HubStyle/static-2.316
Disallow: /atom/static-1.29
Disallow: /I18n/static-7.228
Disallow: /react-select-plus/static-1.20
Disallow: /icons/static-2.123
Disallow: /MeetingsPublic/static-1.2544
Disallow: /icons/static-2.143
Disallow: /MeetingsLib/static-1.1206
Disallow: /UIComponents/static-2.918
Disallow: /ui-images/static-2.116
Disallow: /atom/static-1.33
Disallow: /urlinator/static-1.57
Disallow: /usage-tracker-core/static-1.79
Disallow: /UIComponents/static-2.1315
Disallow: /raven/static-3.6
Disallow: /HubStyleTokens/static-2.96
Disallow: /salesImages/static-1.374
Disallow: /HubStyle/static-2.359
Disallow: /raven-hubspot/static-1.47
Disallow: /HubStyleTokens/static-2.83
Disallow: /salesImages/static-1.368
Disallow: /usage-tracker/static-1.67
Disallow: /usage-tracker-core/static-1.68
Disallow: /Reagan/static-6.28
Disallow: /usage-tracker-core/static-1.76
Disallow: /jquery-libs/static-1.48
Disallow: /UIComponents/static-2.1011
Disallow: /MeetingsBase/static-1.1609
Disallow: /UIComponents/static-2.949
Disallow: /MeetingsLib/static-1.1242
Disallow: /MeetingsPublic/static-1.2581
Disallow: /timezone-utils/static-2.67
Disallow: /HubStyle/static-2.342
Disallow: /HeadJS/static-2.92
Disallow: /hublabs-experiments/static-1.248
Disallow: /q/static-5.12
Disallow: /MeetingsLib/static-2.180
Disallow: /q/static-5.23
Disallow: /react-utils/static-2.49
Disallow: /Reagan/static-7.27
Disallow: /I18n/static-7.298
Disallow: /ui-addon-avatars/static-1.1222
Disallow: /react-select-plus/static-1.26
Disallow: /ui-images/static-2.101
Disallow: /icons/static-2.124
Disallow: /I18n/static-7.293
Disallow: /usage-tracker/static-1.110
Disallow: /PortalIdParser/static-1.28
Disallow: /hublabs-experiments/static-1.262
Disallow: /usage-tracker-core/static-1.89
Disallow: /HubStyleTokens/static-2.310
Disallow: /HubStyle/static-2.622
Disallow: /MeetingsPublic/static-1.3655
Disallow: /MeetingsBase/static-1.2042
Disallow: /usage-tracker/static-1.108
Disallow: /hub-http/static-1.157
Disallow: /usage-tracker/static-1.68
Disallow: /usage-tracker-core/static-1.69
Disallow: /MeetingsLib/static-1.1227
Disallow: /MeetingsLib/static-2.413
Disallow: /usage-tracker/static-1.71
Disallow: /MeetingsLib/static-2.464
Disallow: /MeetingsLib/static-2.201
Disallow: /icons/static-2.131
Disallow: /MeetingsLib/static-1.1224
Disallow: /hub-http/static-1.161
Disallow: /enviro/static-3.72
Disallow: /MeetingsPublic/static-1.2562
Disallow: /q/static-5.22
Disallow: /transmute/static-2.9
Disallow: /hub-http/static-1.156
Disallow: /HeadJS/static-2.83
Disallow: /Reagan/static-7.16
Disallow: /HubStyle/static-2.323
Disallow: /Reagan/static-6.29
Disallow: /styled-components/static-1.6
Disallow: /ui-addon-avatars/static-1.1251
Disallow: /MeetingsPublic/static-1.2773
Disallow: /MeetingsPublic/static-1.2674
Disallow: /ui-images/static-2.100
Disallow: /ui-addon-avatars/static-1.1183
Disallow: /icons/static-2.144
Disallow: /raven-hubspot/static-1.60
Disallow: /UIComponents/static-2.1578
Disallow: /MeetingsLib/static-2.556
Disallow: /ui-addon-avatars/static-1.1542
Disallow: /HubStyle/static-2.365
Disallow: /ui-addon-avatars/static-1.1089
Disallow: /MeetingsBase/static-1.2604
Disallow: /timezone-utils/static-2.66
Disallow: /I18n/static-7.312
Disallow: /I18n/static-7.278
Disallow: /HubStyleTokens/static-2.167
Disallow: /HubStyleTokens/static-2.150
Disallow: /MeetingsPublic/static-1.3264
Disallow: /MeetingsBase/static-1.2253
Disallow: /I18n/static-7.269
Disallow: /PatternValidationJS/static-1.103
Disallow: /hub-http/static-1.178
Disallow: /Reagan/static-7.39
Disallow: /HeadJS/static-2.115
Disallow: /I18n/static-7.304
Disallow: /StyleGuideUI/static-3.136
Disallow: /EarlyRequesterJS/static-1.38
Disallow: /ui-addon-avatars/static-1.1867
Disallow: /HubStyle/static-2.544
Disallow: /q/static-5.28
Disallow: /PatternValidationJS/static-1.102
Disallow: /usage-tracker-core/static-1.103
Disallow: /MeetingsPublic/static-1.4178
Disallow: /MeetingsBase/static-1.2041
Disallow: /usage-tracker-core/static-1.101
Disallow: /hublabs-core/static-4.44
Disallow: /timezone-utils/static-2.111
Disallow: /Baldric/static-1.94
Disallow: /MeetingsPublic/static-1.3012
Disallow: /usage-tracker-container/static-1.158
Disallow: /usage-tracker-container/static-1.162
Disallow: /FormsCommonComponents/static-1.879
Disallow: /usage-tracker-container/static-1.163
Disallow: /FormsCommonComponents/static-1.864
Disallow: /FormsCommonComponents/static-1.886
Disallow: /PatternValidationJS/static-1.100
Disallow: /usage-tracker-public/static-1.49
Disallow: /ui-addon-avatars/static-1.1889
Disallow: /HubStyleTokens/static-2.453
Disallow: /MeetingsBase/static-1.3127
Disallow: /MeetingsPublic/static-1.4227
Disallow: /MeetingsBase/static-1.3176
Disallow: /Hu
- https://www.hubspot.com/company-news/hubspots-inbound-2013-conference-kicks-off-today-in-downtown-boston
- https://www.hubspot.com/blog/bid/31882/hubspot-launches-new-conversion-assists-report
- https://www.hubspot.com/email-signature-generator/add-html-signature-mail-mac
- https://www.hubspot.com/partner-news/april-2018-tier-promotions
- https://www.hubspot.com/company-news/comparablyawards
A+Domain Intelligencehubspot.com — via MarkMonitor Inc., 21 years, 5 months oldPASS
236 days
February 6, 2027
61 days
Issued by Google Trust Services
21 years, 5 months
Registered February 6, 2005
Enabled
Protects against DNS spoofing
Unknown
2606:4700::6811:5cbb
MarkMonitor Inc.
Expiry timeline
Recommended actions
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice