How to tell if a website is built on HubSpot

By SearchWebCode · Updated November 7, 2026 · Detection · 2 min read

Check for /_hcms/ paths and x-hs-hub-id or x-hs-content-id headers. A js.hs-scripts.com reference identifies a tracking-code clue, not the site's hosting platform.

A WordPress or Shopify site can embed HubSpot forms, chat and tracking code. To check whether HubSpot actually hosts the page, inspect the CMS paths and response headers separately from those integrations.

Check the homepage source

Source marker	What to check
`/_hcms/`	HubSpot CMS paths, including hosted fonts and forms. Look for several first-party references.
`/hs/scriptloader/`	A first-party form of the HubSpot script loader used on hosted pages.
`/hubfs/` or `/hs-fs/hubfs/`	HubSpot file assets. Check the hostname: another site's page can embed a HubSpot-hosted file.
`name="generator" content="HubSpot"`	A CMS generator declaration. It can be removed or copied, so check other markers too.
`js.hs-scripts.com/<portal>.js`	An external tracking loader that can be installed on other platforms.
`js.hsforms.net` or `static.hsappstatic.net`	Forms or application assets. An embed alone does not identify the page's CMS.

Check response headers

In DevTools, select the page's document request in the Network panel and inspect its response headers. From a terminal, request the page and save its headers:

curl -sS -L -D headers.txt -o /dev/null https://example.com/
grep -iE '^(x-hs-|server:)' headers.txt

x-hs-hub-id identifies the HubSpot account; x-hs-content-id identifies the content record. Together with the page's CMS paths, they support a HubSpot hosting classification. When a URL redirects, read the headers for the final page rather than attributing an intermediate response to it.

server: cloudflare does not identify HubSpot: many hosting services use Cloudflare. The Cloudflare detection guide covers that separate infrastructure check.

Find other pages with HubSpot markers

CMS paths: "/_hcms/" OR "/hs/scriptloader/".
Tracking loaders: "js.hs-scripts.com" OR "/hs/scriptloader/".
One portal: search its full loader URL, such as js.hs-scripts.com/8112310.js, or the first-party /hs/scriptloader/8112310.js form.

Open each match. The external-loader sample reports 203,375 estimated matches, but a hostname match can be only a preconnect or DNS-prefetch hint. The retained techcrunch.com and www.searchenginejournal.com snippets illustrate those hints; neither snippet alone establishes that the tracking script loaded.

Classify the result before exporting

Keep separate fields for CMS evidence, tracking code, embedded forms and portal ID. This avoids turning a list of HubSpot references into an unsupported list of HubSpot-hosted websites. The index stores HTML, not live response headers, so review hosting claims on the current page.

Use the tracking-ID investigation guide for shared portals and the lead-list guide for qualifying exports. Adjacent CRM and email footprints are in the marketing technology directory.

Source counts checked 2026-10-14. They describe stored homepages, not live installations. How the counts are measured.

← All guides · Browse technologies · Search and export pricing

Frequently asked questions

Does js.hs-scripts.com mean the website is hosted on HubSpot?

No. It can be an external tracking loader or even a connection hint. Check the actual script tag, CMS paths and response headers.

Does a hubfs image prove the page uses HubSpot CMS?

No. A page on another platform can embed a HubSpot-hosted image. Check the asset hostname and corroborate it with CMS markers on the page itself.

Does a shared portal ID prove the sites have one owner?

No. Agencies and shared service setups can explain the same portal number across domains. Record the code reference and look for separate evidence of a relationship.