This address is a technical backend subdomain for Intercom's mobile messenger service. If you landed here directly, you are seeing a 403 error because the server is not meant to be browsed by the public. Intercom is a legitimate, well-known company used by thousands of businesses for customer communication. There is no evidence of a scam. However, this specific URL does not serve a consumer-facing page, so there is nothing to review or buy here. If you encountered this link unexpectedly, you can safely ignore it. For reference, Intercom's main website and support pages are where you would find actual services and contact information. This domain's security setup, including valid encryption and clean reputation checks, is consistent with legitimate infrastructure.
Not sure — double-check xstxtwfr-android.mobile-messenger.intercom.com first
In plain English
This is a legitimate subdomain belonging to Intercom, a known customer messaging platform. You are seeing a 403 error because it is a backend endpoint not meant for direct public browsing. There is no scam here, but the site itself isn't consumer-facing.
Where the score comes from
Strong security posture. The site uses modern TLS encryption, enforces HTTPS, and has a valid certificate from a reputable issuer. No malware or phishing flags were detected by Google Web Risk.
This is clearly a subdomain of Intercom, a well-known legitimate company. The parent entity is identifiable even though the subdomain itself has limited WHOIS visibility. No hidden ownership concerns.
The site is not found on any blacklists and has a clean security reputation. However, it has no history in the Wayback Machine and no independent reviews, which is expected for a backend subdomain of a larger service.
The page appears to be a backend or API endpoint for Intercom's mobile messenger service. It lacks an about page or social presence, but that is normal for this type of infrastructure subdomain.
Privacy policy and terms of service are present, which is good. As a subdomain of Intercom, it likely inherits the parent company's compliance framework. No red flags for this type of service.
Hosted on AWS CloudFront with a fast load time and solid DNS resolution. No email handling is expected for this kind of service. The robots.txt blocking all crawlers is unusual but not alarming for a backend endpoint.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →