How is intercom.io?
Looks fine
risk 0/100
Registered 15 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 277 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
277 ms · ends at www.intercom.com
HTTPS
183 d
left on a Amazon certificate
Age
15 years
registered 2011-08-15
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records4 record types
| A | 3.167.112.90 3.167.112.16 3.167.112.9 3.167.112.52 |
|---|---|
| MX | 20 alt2.aspmx.l.google.com 30 aspmx4.googlemail.com 30 aspmx3.googlemail.com 30 aspmx5.googlemail.com 30 aspmx2.googlemail.com 10 aspmx.l.google.com 20 alt1.aspmx.l.google.com |
| NS | ns-97.awsdns-12.com ns-1478.awsdns-56.org ns-1867.awsdns-41.co.uk ns-661.awsdns-18.net |
| TXT | all-good-technology-inc-domain-verification-0exxdz=50vxx0vn2alRLBv7ZDLBsft1P bugcrowd-verification=9f9a1549d203c31e96851d605187f335 spycloud-domain-verification=e49a0b79-2252-49d3-9412-67fb19f1427e google-site-verification=ez1F6KAmCudYI4EUyIhUJ2i4pKaoJONHPc3VMt2A58I google-site-verification=pbKcc7lEi4kv7RhbT50x_Ev2wnIV5TcWcTeYWxS5rh8 google-site-verification=PJaVXXgRe9jtml54j0qd1f7YB_7dGfKopsEQFUEQKSw atlassian-domain-verification=cvSYWtG+M8VZhvC5F3Xh+TdCgqGSgwCJD8yV9xB+ki17M+f+k7v8oWpzfHln8Xy1 google-site-verification=OSOfG-mb3KUeEu7ZI0L2obMNOp4bZhLtBwCqMM7Al5s apple-domain-verification=6WueY6qt9eXNiDGN openai-domain-verification=dv-Rpdv1vp3dWq5fhU72HogewTv canva-site-verification=Gdlzk_G0P2WmO6LCmpkwFg TAILSCALE-tsR9uC78MVSXKWuTOMDP docusign=5671c452-c1b5-463d-980a-42c6d0c0eaf7 elevenlabs=1aH-vlhm6CdQMGtQETglCejQWKkrB4BJk9dcuV0FOZQ linear-domain-verification=pmfpkwpbt5jg docker-verification=4fc0635c-fdfe-4a0b-a513-7c6b1a8f0a8b @7L^2cvvFFY jamf-site-verification=aked3xDSe3HcqRs1hkmCjQ slack-domain-verification=isIS2GuqMLlNw9zaOdHov3Jx7KF5AAJJnBUkIi2T jetbrains-domain-verification=eqj5zs6mlow55x1ab5rpkgj05 elevenlabs=a4CzfapvQzlOc4ocj66kx__z3bGNk45KuG9nhjhULUM cursor-domain-verification-8v636x=2iFMOHCI7ynmysN9t8SEcB33t 44fe5751ed54509a8eb9b93b5304d15f36825314 miro-verification=83c3039d09e9cd06b3e2935d6857d875d55c3edb stripe-verification=e4d49836a81144c2720bba6b3c5bd51275ea8d9378d9ebd3e4d2f17480f0c565 anthropic-domain-verification-vg9n3z=HEiyqGokg2F1KX8RGg8xTDpvn d38xc8nflzxfm6.cloudfront.net google-site-verification=oFO8X3XmUG_4Q17VJ-kdvxjI_7lnWTPpm7Yd3uObAlY adobe-idp-site-verification=14d3a7a87dad24c14b77b4cf854ff2edcd833fe9ff6649dc8b40ae053f0aeb7a https://issues.sonatype.org/browse/OSSRH-64279 google-site-verification=1XkbuV4wwZYSKVQ3viMyuIBR_2Kbu0TVOu59SssCWiI mgverify=3e1c1a7bc6cf0c9dd60c004038e141000ad7299f576b696ca7040b8c8fac7b40 docusign=36a72b16-7b53-4451-9c2b-ed8ddaa4fdd6 status-page-domain-verification=ff8hq5rxx1pq v=spf1 include:_spf.google.com include:cmail1.com include:stspg-customer.com a:zgateway.zuora.com -all google-site-verification=EoBLTSecVYsuED-Y1lC6EwW0Q1iu9JLvE-AIi--nCco zapier-domain-verification-challenge=315daada-6ac1-4712-b559-50452e34dde4 adobe-sign-verification=6b53472fcd37723d956a05b81966ec |
RegistrationGandi SAS
| registrar | Gandi SAS |
|---|---|
| registered | 2011-08-15 |
| expires | 2027-08-15 |
| last changed | 2026-08-11 |
| owner | Intercom R&D |
| nameservers | ns-97.awsdns-12.com ns-661.awsdns-18.net ns-1478.awsdns-56.org ns-1867.awsdns-41.co.uk |
| status | client transfer prohibited |
registered 2011-08-15expires 2027-08-15
HTTPS certificate183 days left
| valid | yes |
|---|---|
| issuer | Amazon |
| covers | *.intercom.com, intercom.io, intercom.com, *.intercom.io |
| protocol | TLSv1.3 |
issued 2026-10-13expires 2027-04-28
DNSSECinsecure
Domain is not signed with DNSSEC
. → io → intercom.io
Email authenticationexcellent
| SPF | pass v=spf1 include:_spf.google.com include:cmail1.com include:stspg-customer.com a:zgateway.zuora.com -all |
|---|---|
| DMARC | pass policy quarantine |
| DKIM | found: google, smtp |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 160/205
Basic Security20/40missing: DNSSEC Enabled
Record Security30/45missing: CAA Records, DKIM Presence
Advanced Security15/25missing: SOA Record Configuration, IPv6 Support
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop3.167.112.90Barracuda3.167.112.90UCEPROTECT Level 13.167.112.90SpamCop3.167.112.52Barracuda3.167.112.52UCEPROTECT Level 13.167.112.52SpamCop3.167.112.16Barracuda3.167.112.16UCEPROTECT Level 13.167.112.16SpamCop3.167.112.9Barracuda3.167.112.9UCEPROTECT Level 13.167.112.9
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=intercom.io" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=intercom.io"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on intercom.io.
Reference: /llms.txt.
Watch intercom.io. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days