Hotjar
Hotjar is a product-analytics tool that records heatmaps, session replays and on-site surveys. ScanMalware detects it from the static.hotjar.com loader and its tracking calls.
Session-recording scripts capture detailed visitor interaction and have broad page access, which makes them notable both for privacy and as significant third-party code running on the site.
Commonly deployed alongside Hotjar
Of the 5,478 public scans where Hotjar was detected, these are the technologies most often present on the same site. The share is the percentage of Hotjar sites that also ran each one.
| Technology | Category | Share of Hotjar sites |
|---|---|---|
| Google Analytics | wappalyzer | 92.4% |
| Google Tag Manager | wappalyzer | 82.52% |
| Open-Graph-Protocol | miscellaneous | 62.78% |
| jQuery | wappalyzer | 57.72% |
| Facebook Pixel | wappalyzer | 55.9% |
| Google-Analytics | miscellaneous | 47.9% |
| HSTS | wappalyzer | 47.35% |
| Cloudflare | wappalyzer | 46.6% |
| JQuery | miscellaneous | 39.4% |
| Cloudflare Bot Management | wappalyzer | 37.31% |
| PoweredBy | miscellaneous | 36.32% |
| MetaGenerator | miscellaneous | 34.28% |
| PHP | wappalyzer | 33.44% |
| X-UA-Compatible | miscellaneous | 32.79% |
How ScanMalware detects Hotjar
Hotjar is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that Hotjar is present, but how it is being used. Open the full search interface for Hotjar →
Recent public scans featuring Hotjar
A rolling sample of recent public scans where Hotjar was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| Login | EMERALD https://emerald.hum.works | 2026-11-04 |
| C-Suite Signals: Dame Emma Walmsley, GlaxoSmithKline | Profile https://welcometoprofile.com/insight/2025/06/17/c-suite-signals-dame-emma-walmsley-glaxosm… | 2026-11-04 |
| Emma Walmsley to succeed Andrew Witty as Chief Executive Officer of GlaxoSmithKline | GSK https://www.gsk.com/en-gb/media/press-releases/emma-walmsley-to-succeed-andrew-witty-as-ch… | 2026-11-04 |
| Scottish Borders – Scottish Assessors Association Sites http://www.saa.gov.uk/scottishborders | 2026-11-04 |
| Subscription preferences https://hs-21065354.s.hubspotemail.net/hs/preferences-center/en/page?data=W2nXS-N30h-SnW4m… | 2026-11-04 |
| Aktion für begrenzte Zeit: 70 % Rabatt auf Akusoli! | Akusoli https://se02.children-store.lol/OmCNQEu/ | 2026-11-04 |
| https://themonmouthjournalnorthern.com/primary-election-results-for-monmouth-county-p16207-73.htm | 2026-11-04 |
| TJC | Free Delivery On First Shop | Jewellery, Beauty, Fashion Online https://tjc.co.uk | 2026-11-04 |
Frequently asked questions about Hotjar
- Does using Hotjar mean a website is unsafe?
- No. Hotjar is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using Hotjar can be perfectly safe or actively malicious.
- How many sites using Hotjar has ScanMalware scanned?
- Hotjar has been detected in 5,478 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with Hotjar?
- Across scanned sites, Hotjar is most often seen alongside Google Analytics, Google Tag Manager and Open-Graph-Protocol. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.