When you try to view your website in our Heatmap’s Interactive Mode, you may sometimes see an error message or a blank screen. This usually happens because your site’s security settings such as Cloudflare or other protective configurations are blocking our tool from loading. While this means your security is working as intended, it also prevents the heatmap from rendering correctly. To fix the issue and ensure you can view your site in Interactive Mode, you’ll need to add our heatmap domains to your security whitelist.
Instructions on How to Whitelist Our Domains
Whitelisting our domains in your security provider's settings will allow your site content to load without being blocked.
Domains to Whitelist
Add all of the following domains to your whitelist:
heatmap.com
heatmapcore.com
*.heatmap.com (wildcard for all subdomains)
*.heatmapcore.com (wildcard for all subdomains)
Important: You must add all four entries for the heatmap to work properly. The wildcard entries (with *) ensure that all our service subdomains can connect.
Step-by-Step Instructions on How to Whitelist our Domains
Identify Your Security Provider
Check if you're using Cloudflare, Sucuri, Wordfence, or another security service
If unsure, contact your web administrator or hosting provider
Access Your Security Settings
Log into your security provider's dashboard
Navigate to the firewall or security rules section
Add Our Domains to Your Whitelist
Look for options like "IP Whitelist," "Allow List," or "Firewall Rules"
Add each domain listed above separately
Save your changes
Test the Connection
Wait 2-5 minutes for changes to take effect
Return to the heatmap tool and try interactive mode again
Your site should now load properly
Platform-Specific Instructions
For Cloudflare Users:
Go to Security → WAF → Tools
Select IP Access Rules or Page Rules
Add each domain with "Allow" action:
heatmap.com
heatmapcore.com
*.heatmap.com
*.heatmapcore.com
Apply to all websites or specific zones
Save and deploy changes
For Other Security Providers:
Look for "Whitelist," "Allow List," or "Trusted Sources"
Some providers may require adding domains to a "CORS" or "Referrer" whitelist
The process is similar across most providers
Frequently Asked Questions
Q: Do I need to add all four domains?
A: Yes. All four domains are required for full functionality. The main domains handle core services, while the wildcard entries ensure all features work properly.
Q: Is it safe to whitelist these domains?
A: Yes. Our heatmap tool only reads publicly available content to generate visual analytics. We don't modify your site or access sensitive data.
Q: How long does whitelisting take to work?
A: Most changes take effect within 5 minutes, though some providers may take up to 30 minutes.
Q: What if my security system doesn't support wildcards?
A: Contact our support team. We can provide a list of specific subdomains to whitelist instead.
Q: What if I don't have access to security settings?
A: Contact your IT team or web administrator. Share this article with them to explain what needs to be done.
Still Having Issues?
Troubleshooting Checklist:
If you've whitelisted all domains but still can't view your site in interactive mode:
Double-check that you've added all four domains exactly as shown
Ensure wildcards (*) are properly formatted
Clear your browser cache and cookies
Try using a different browser
Check if you have multiple security layers that might need updating
Need Help?
Our support team is available Monday-Friday, 9 AM-5 PM EST. When contacting us, please include:
Your website URL
Your security provider (Cloudflare, etc.)
Which domains you have already whitelisted
Any error messages you're seeing