What HubSpot traffic looks like
HubSpot spans three traffic families (analytics beacons, form capture, and CTAs), all keyed to the Hub ID in the loader URL.
- Endpoint pattern
- Loader
js.hs-scripts.com/<hubId>.jspulls the analytics module fromjs.hs-analytics.net(orjs-eu1.hs-analytics.netfor EU data residency) and, where ads features are enabled, the ads pixel fromjs.hsadspixel.net; beacons go totrack.hubspot.comortrack-eu1.hubspot.com; forms throughjs.hsforms.net/forms.hubspot.com; CTAs from per-accountcta-*.hubspot.comhosts - Transport
- GIF requests with everything in the query string:
__ptq.giffor page views,__ptbe.giffor behavioral events; form submissions are their own family, including the "collected forms" feature that POSTs submissions of the site's own non-HubSpot forms to aforms.hubspot.comcollection endpoint, worth finding if you did not know it was on - Key parameters
aHub ID ·vivisitor ID ·uthehubspotutkuser token HubSpot uses to stitch anonymous visits to a contact record once a form identifies the person ·ncnew-contact flag · page URL and title- Cookies
hubspotutkplus the__hstc/__hssc/__hssrcsession cookies carry the visit history
Debugging HubSpot with Event Watcher
- A dedicated HubSpot parser decodes
__ptq.gif/__ptbe.gifbeacons into readable groups: Identity (Hub ID, visitor ID,hubspotutk, browser fingerprint), Page Context, Device, and Timing. - The overview surfaces the Hub ID, page title, and new-contact flag directly.
- The cookies section shows the
hubspotutk/__hstctraffic per event, and every hit gets the consent verdict.
HubSpot and consent
Marketing consentThe extension checks HubSpot against the marketing consent category, a stricter bar than analytics, because the hubspotutk token exists precisely to join browsing history to an identified contact, which is why most CMPs classify HubSpot tracking as marketing.
HubSpot's own consent integration can hold the tracker in a cookieless "do not track" mode until the banner grants.
A correct setup shows no pre-consent beacons, or beacons without identity cookies; a __ptq.gif carrying hubspotutk before the CMP decision is marked pre-consent and counted.
Common debugging scenarios
- Contact timeline missing page views. Filter to HubSpot and check that
__ptq.giffires per page with a stablehubspotutk. A token that changes between pages means the cookie is being blocked or reset. - Form fills not creating contacts. Look for the form submission call (HubSpot-hosted or collected-forms) and verify it fires alongside the tracking beacon carrying the same visitor token.
- Collected forms enabled unknowingly. Audit the stream for
forms.hubspot.comtraffic on pages with only non-HubSpot forms. That reveals the feature capturing submissions. - EU data residency verification. Confirm beacons target
track-eu1.hubspot.comrather than the US host, using the Endpoint pivot in Grouped view. - Pre-consent identification. Walk the page before accepting the banner and check the consent badges on any HubSpot beacon. Compare with other marketing-automation traffic such as Klaviyo on the same site, or run the broader pixel audit workflow.