Claim hstspreload.org
Put one of these two strings on the domain and this page will confirm it. Both are free, neither needs an account, and either one can be checked by anyone else the same way we check it.
Either: a DNS TXT record
On hstspreload.org, add a TXT record with this value:
crawlcheck-verify=e382f6bf91ac3ed89a8058584342f8f8
Or: a meta tag on the home page
In the <head> of https://hstspreload.org/:
<meta name="crawlcheck-verify" content="e382f6bf91ac3ed89a8058584342f8f8">
Then check it
Proving ownership does not watch anything. Keep hstspreload.org on the daily record — a licence re-measures it twice a day and keeps finding age and change receipts.
The string is derived from the host name, so it is the same every time and never expires — you do not need to keep this page. Claiming marks the record as owner-verified and nothing else: it does not change the grade, move a shelf, or hide a finding. To be removed from the registry instead, put User-agent: CrawlCheck and Disallow: / in your robots.txt, or write to the opt-out address.
Machine-readable: POST /api/registry/verify with {"host":"hstspreload.org"}.