Skip to content

Intercom · subdomains

Every subdomain

500 names · 2 in scope

Every dot is a host name under the program's domains that ProjectDiscovery's public Chaos dataset holds. Bright ones are in the program's own scope as it publishes it; warm ones were first seen this week.

Open Intercom on Bugcrowd

Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone.

Source: ProjectDiscovery Chaos. Built 2026-11-14 from the Chaos data of 2026-11-14; scope as the program published it then. Matched by the program's Chaos listing.

names
500
in scope
2
root domains
1

Every one of the 500 is a mark on the map. Named now: 1 to 26, by name first.

  1. 20api-iam.intercom.ioNot in the scope · API · Sign-inlisted since 2026-11-14 · 1 label below intercom.io
  2. 20api-ping.intercom.ioNot in the scope · APIlisted since 2026-11-14 · 1 label below intercom.io
  3. 20nexus-websocket-a.intercom.ioNot in the scope · Toolslisted since 2026-11-14 · 1 label below intercom.io
  4. 20nexus-websocket-b.intercom.ioNot in the scope · Toolslisted since 2026-11-14 · 1 label below intercom.io
  5. 20widget.intercom.ioNot in the scopelisted since 2026-11-14 · 1 label below intercom.io
  6. 40incoming.intercom.ioNot in the scopelisted since 2026-11-14 · 1 label below intercom.io
  7. api.intercom.ioNot in the scope · APIlisted since 2026-11-14 · 1 label below intercom.io
  8. api-iam.intercom.ioIn scope · API · Sign-inlisted since 2026-11-14 · 1 label below intercom.io
  9. api-ping.intercom.ioNot in the scope · APIlisted since 2026-11-14 · 1 label below intercom.io
  10. api-segment.intercom.ioNot in the scope · APIlisted since 2026-11-14 · 1 label below intercom.io
  11. app.intercom.ioIn scopelisted since 2026-11-14 · 1 label below intercom.io
  12. au.intercom.ioNot in the scopelisted since 2026-11-14 · 1 label below intercom.io
  13. api.au.intercom.ioNot in the scope · APIlisted since 2026-11-14 · 2 labels below intercom.io
  14. api-iam.au.intercom.ioNot in the scope · API · Sign-inlisted since 2026-11-14 · 2 labels below intercom.io
  15. messenger-apps.au.intercom.ioNot in the scopelisted since 2026-11-14 · 2 labels below intercom.io
  16. mobile-messenger.au.intercom.ioNot in the scopelisted since 2026-11-14 · 2 labels below intercom.io
  17. wildcard.mobile-messenger.au.intercom.ioNot in the scopelisted since 2026-11-14 · 3 labels below intercom.io
  18. blog.intercom.ioNot in the scopelisted since 2026-11-14 · 1 label below intercom.io
  19. www.blog.intercom.ioNot in the scopelisted since 2026-11-14 · 2 labels below intercom.io
  20. build.intercom.ioNot in the scope · Build and CIlisted since 2026-11-14 · 1 label below intercom.io
  21. cdn.intercom.ioNot in the scopelisted since 2026-11-14 · 1 label below intercom.io
  22. uploads.intercomusercontent.comapi-iam.intercom.ioNot in the scope · Sign-in · Data and fileslisted since 2026-11-14 · 3 labels below intercom.io
  23. corporate.intercom.ioNot in the scope · Internallisted since 2026-11-14 · 1 label below intercom.io
  24. actions-gatekeeper.corporate.intercom.ioNot in the scope · Internallisted since 2026-11-14 · 2 labels below intercom.io
  25. aeo-automation.corporate.intercom.ioNot in the scope · Internallisted since 2026-11-14 · 2 labels below intercom.io
  26. claude-session-sync.corporate.intercom.ioNot in the scope · Internallisted since 2026-11-14 · 2 labels below intercom.io

in the program's scopefirst seen this weeknot in the scopelisted out of scope

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in