If your HubSpot emails suddenly stop tracking or a landing page fails to load, chances are it’s not a platform bug—it’s a domain configuration issue. These problems often trace back to mismanaged system domains, and the ripple effects can hit everything from deliverability to analytics accuracy.
You might think domain setup is a one-time task, but in HubSpot, your system domains sit at the core of email tracking, content hosting, and campaign reporting. When they’re misaligned, your data gets messy, your content loses credibility, and troubleshooting turns into a guessing game.
This step-by-step guide is here to help. You’ll learn what system domains actually do, where to find them, how to configure them properly, and what to monitor to avoid disruptions and protect your brand.
Managing System Domains for Staging and Internal Testing
System domains power the processes most visitors never see—but that your platform depends on. These are the web addresses HubSpot uses to host and track your assets behind the scenes. Whether it’s an email link, a hosted PDF, or a form embed, system domains route and authenticate that traffic accurately.
You can manage your domains inside HubSpot by going to Settings > Domains & URLs. There, you’ll find your primary domains for websites and blogs, your email sending domains for authentication, and your system domains for tools like file hosting, tracking, and forms.
System domains aren’t visible to your users—but they are essential. While your audience interacts with pages like www.yourcompany.com, your data is tracked using subdomains such as hs-sites.com or hsforms.net. The better your domain mapping, the smoother your branding, security, and reporting will be.
You rely on these system connections anytime you:
- Manage your HubSpot-hosted websites or landing pages
- Authenticate email sending domains
- Enable encryption via SSL for connected domains
- Analyze click-throughs and form submissions from any HubSpot-hosted content
HubSpot assigns default system domains upon account creation, but you’re not stuck with the default setup. IT and marketing admins should review and customize domain settings to match internal DNS protocols and brand guidelines.
How System Domains Work Under the Hood
Your system domains act like digital highways between HubSpot’s infrastructure and your audience interactions. Every click, download, and form fill is routed internally through domains you don’t see—but they matter more than you might think.
Here’s a closer look at how they function:
- HubSpot assigns internal service URLs.
Your account comes with specific URLs like [yourhubid].hs-sites.com, [yourhubid].hubspotlink.com, and [yourhubid].hsforms.net—each built for different types of content delivery and tracking.
- Your branded domains connect via DNS.
Once you connect a domain in HubSpot, you’ll be prompted to update DNS records at your domain registrar. These entries make sure traffic to domains like go.yourcompany.com is routed securely through HubSpot’s systems.
- SSL certificates are auto-provisioned.
You don’t need to manually purchase an SSL. HubSpot generates certificates and applies them to your domains, keeping everything encrypted and safe in your browser.
- Tracking and analytics begin.
Now anything hosted or tracked—emails, clicks, form data—gets routed through system URLs while still appearing branded to the end user.
- Analytics and CRM reporting link it all together.
These data points are matched to contact and company records in your CRM, allowing for reliable attribution and behavior-based automation.
Inside Domains & URLs, you can also choose which domain hosts specific content types and configure settings like file hosting subdomains and default language for international pages. Keep this area updated as your site grows or your team’s needs evolve.
Main Uses Inside HubSpot
System domains aren’t theoretical—they’re active behind every major HubSpot function. Understanding where they appear helps you stay ahead of potential tracking failures or security mismatches.
Email Sending and Tracking Authentication
Email performance relies heavily on correctly configured domains. With every marketing email, HubSpot uses system domains like hubspotlink.com to route click-throughs and open tracking. To avoid spam filters and ensure brand-aligned URLs in your messages, you’ll need to authenticate your sending domain using DNS.
That means adding DKIM and SPF records to your domain registrar to tell the internet, “Yes, HubSpot can send on our behalf.”
Example: Your IT team sets up email.yourcompany.com as a sending domain. Once DKIM and SPF records are verified through HubSpot, all future emails pass authentication checks with inbox providers—and your click-tracking links remain transparent and branded.
Website and Landing Page Hosting
If you’re using HubSpot CMS, your hosted pages rely directly on system domains for delivery and SSL security. Think of it this way: your content lives on branded domains like www.yourcompany.com, but HubSpot is doing the hosting under the hood.
You can assign different subdomains to different content types—downloads, landing pages, blogs—while the system domain handles backend routing.
Example: You publish a campaign landing page at offers.yourcompany.com. To browsers, it’s fully secure and on-brand. Behind the scenes, HubSpot serves up the content via its system domain and automatically tracks engagement.
File Hosting and Tracking
Whenever you upload an asset—PDF, video, image—HubSpot hosts it on a specific system domain, such as hubspotusercontent-na1.net. Managing these settings helps keep your email links clean and your internal documents secure.
Example: Your marketing team shares a new eBook via a campaign landing page. The PDF link is fully accessible to your audience—but internal files uploaded for the sales team are set to private, restricted to logged-in users.
Form Submissions and Embedded Elements
Embedded forms, whether on a HubSpot CMS site or an external WordPress page, use HubSpot’s system domain (hsforms.net) for secure data collection. If this domain is misconfigured or blocked by your firewall, submissions can fail silently.
Example: A visitor completes a contact form on blog.yourcompany.com. That data routes through hsforms.net, validating the submission and assigning it to the right contact record in your CRM—no extra work required on your end.
Common Setup Errors and Wrong Assumptions
Even seasoned admins get tripped up by domain setup. Here are the most common missteps to avoid:
Missing DNS Records
One of the biggest issues is incorrectly copying DNS entries. Even a small typo in a CNAME breaks validation and keeps your domain offline. Always copy records directly from HubSpot’s dashboard, and wait for propagation before testing.
Confusing Primary and System Domains
Setting a primary domain for your website does not override HubSpot’s system domains. Both need to function in parallel. Don’t delete or rename system domains—even if they look unfamiliar.
Neglecting Email Authentication
SPF and DKIM settings are not optional—they prevent your emails from flagging as suspicious. Double-check these under the “Email Sending Domains” section and ensure records are in place before sending campaigns.
Disabling SSL Prematurely
Sometimes teams disable SSL to troubleshoot a domain issue, only to forget to re-enable it. This leaves your site open to warnings in Chrome and Firefox. Keep SSL on at all times, even during testing.
Step-by-Step Setup or Use Guide
Before you dive in, make sure you have DNS access (like GoDaddy or Cloudflare) and Super Admin permission in your HubSpot portal. You’ll also need to use a verified company email domain connected to your HubSpot account.
Here’s how to set it all up:
- Go to Domain Settings
In HubSpot, head to Settings > Website > Domains & URLs.
- Review System Domains
You’ll see default domains like hs-sites.com and hsforms.net, already active. These stay as-is, but related domains can be customized for branding.
- Connect a New Domain
Click “Connect a domain” and choose the type—Primary, Secondary, Email Sending, or Redirect.
- Choose Content Type
Select whether the domain will host landing pages, websites, blogs, or emails.
- Copy the DNS Instructions
HubSpot provides exact records (CNAME, A, or TXT) tailored to your setup.
- Add DNS Records at Your Provider
Log in to your registrar and insert those records precisely as shown.
- Verify the Domain
Back in HubSpot, click “Verify.” It may take up to 24 hours. Once confirmed, SSL is issued automatically.
- Assign Primary Roles
Under “Primary Domains,” select which one should host each type of content. This keeps your branding aligned.
- Confirm Email Authentication
Under “Email Sending Domains,” make sure DKIM shows “verified.” If not, recheck DNS setup.
- Test Tracking Flows
Send yourself a test email. Click a link and confirm it uses your subdomain and not a generic hubspotlink.com URL.
Log these settings in an internal spreadsheet for backup or audits. That way, no one is left guessing later on.
Measuring Results in HubSpot
Once your domains are set up, treat performance monitoring as part of regular maintenance.
Here’s where to look:
- Email Deliverability Rate: Go to Email Performance. If bounces or spam flags go up, double-check domain authentication.
- Traffic Analytics: Ensure your branded domain shows up in visitor reports—not just HubSpot’s system domains.
- Form Submission Rate: Confirm submissions are being recorded in your contact database without errors.
- Page SSL Status: Under Domains & URLs, make sure every domain shows “SSL active.”
- Contact Source Data: In Contact Properties, verify that source attribution is linking to the correct campaign or page origin.
Set a recurring calendar reminder every 90 days to confirm DNS records haven’t changed and that all domains remain active and verified. Skipping this check is a fast way to lose campaign integrity mid-launch.
Short Example That Ties It Together
Let’s say your marketing ops team is building out a gated content library under resources.company.com. You connect this domain in HubSpot, assign it to host landing pages, and apply the generated DNS records with your domain provider.
After verification, HubSpot activates SSL. Now, when visitors download an eBook, their data flows securely through hsforms.net, their file loads from HubSpot’s content servers, and analytics correctly attribute the session.
Because your team documents and maintains these connections, reports show accurate attribution, and future email or content campaigns launch without a hitch.
How INSIDEA Helps
Managing HubSpot’s domain infrastructure is detail-heavy and easy to miss. INSIDEA gives your team the technical muscle to get it right, from setup to long-term upkeep.
- HubSpot Onboarding: Launch with confidence by ensuring every domain is correctly connected and authenticated.
- Ongoing Management: Keep SSL certificates up to date, avoid tracking gaps, and monitor changes proactively.
- Automation Support: Ensure workflows and form submissions aren’t interrupted by domain issues.
- Accurate Reporting and CRM Integration: Connect the dots between users, emails, and page views—backed by verified domain tracking.
Want help optimizing or troubleshooting your domain setup? Connect with our HubSpot advisors or check out INSIDEA’s HubSpot consulting services.
