Executive summary
intercom.com
Moderate exposure. There are gaps an attacker could exploit — fix them soon.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Some browser protections are missing.
The domain's infrastructure lacks basic protections.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS intercom.com
- 2.
Choose which companies may issue certificates for your domain
This reduces the chance of a certificate being issued by a provider you did not choose.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short CAA intercom.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- intercom.com
- Website request
- GET https://intercom.com/ → https://www.intercom.com/
- Scan time
- 2026-11-15 19:34:32 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for intercom.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:32 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/intercom.com)<a href="https://getmirror.online/report/intercom.com"><img src="https://getmirror.online/badge/intercom.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/intercom.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
28/30Encryption & certificate
25/25Browser protections
18/30DNS infrastructure
3/15Public DNS records
| A | intercom.com | 18.238.25.61 18.238.25.79 18.238.25.100 18.238.25.21 |
| AAAA | intercom.com | — |
| MX | intercom.com | 10 aspmx.l.google.com 20 alt1.aspmx.l.google.com 30 alt2.aspmx.l.google.com 40 aspmx2.googlemail.com 50 aspmx3.googlemail.com |
| NS | intercom.com | ns-1093.awsdns-08.org ns-1716.awsdns-22.co.uk ns-315.awsdns-39.com ns-895.awsdns-47.net |
| TXT | intercom.com | 44fe5751ed54509a8eb9b93b5304d15f36825314 adobe-idp-site-verification=622f9376dd66e8b44555e0049f15e096211a73412f9ff0b90c77c0e755699059 adobe-sign-verification=2cfe49f778c0a81ec0be60ae2ff40e03 atlassian-domain-verification=cvSYWtG+M8VZhvC5F3Xh+TdCgqGSgwCJD8yV9xB+ki17M+f+k7v8oWpzfHln8Xy1 d38xc8nflzxfm6.cloudfront.net detectify-verification=1038994aa8bbb5beb6158b29886cec44 docker-verification=bdc1485c-ffc4-4658-8cd3-cf28a5015bb4 facebook-domain-verification=j8c2nfotussc7s0qpsc4y7n0fjjy21 google-site-verification=5QnHPShXKfWUJAKUs4t4zercW12yiwF9jEvJmLBP2NM google-site-verification=7HjYApuNK-bt5EUIFtdu6TcZ9Ehc3aatoWOXUJQo0xs google-site-verification=CfLJw9yYE8HTI73Blv-56xD1zFZihxW21aomLawOdJY google-site-verification=Dv2V_fBxPgF3UAhyjdLwihXES7nqFg-PdbVb8Jcp1ZE google-site-verification=Jpd-UbmFHI67Qo78vfUOrjf92bhNsQOHcbrG3Z_cQnY google-site-verification=TqVER4L4Aje-rIb7mkpnQhLluy_mbLUalGulGesqi4g google-site-verification=dnyUSSOfLwNayG5Nz2KYThLqxhTCwH1AJBHGIDDHLX0 google-site-verification=f-IrTc3O5uXTyOg0RFqt_F54-hEnVDBZ0860wTb9caA google-site-verification=hrKX7ZNSXZTlEsXp0nzu9rMVAibTBwBZgbfCJFFc_K4 google-site-verification=r9Nns5ipHB647AExA0fX7JjpdHMaoH4SgDnSpVq1ios hj-ownership=FW6CQUR3erZ3 https://issues.sonatype.org/browse/OSSRH-64701 hubspot-developer-verification=ZWU1ZDMyNTQtMDJlYi00ZmRjLTk0ZWEtMmY5ZWQ2MDg0MmRl rm_verify=2e9048667e spycloud-domain-verification=290354be-7cd3-4a63-a7e8-aa9c36a9788c status-page-domain-verification=ff8hq5rxx1pq v=spf1 include:_spf.google.com include:servers.mcsv.net include:spf.mandrillapp.com include:mktomail.com include:amazonses.com ip4:156.70.5.128 -all zapier-domain-verification-challenge=70fef13a-003b-4621-8788-478856240ba2 |
| TXT | _dmarc.intercom.com | v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc_agg@vali.email,mailto:7cf61c84@mxtoolbox.dmarc-report.com; ruf=mailto:7cf61c84@forensics.dmarc-report.com,mailto:dmarc-reports@intercom.io; |
| CAA | intercom.com | — |
| DS | intercom.com | — |