Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Let's Encrypt

Established domain (7+ years old)

Registered with reputable registrar (NameCheap, Inc.)

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC configured)

Modern security headers configured (HSTS, CSP)

Good website performance

Active social media presence

Negative Signals

WHOIS information hidden (privacy protection enabled)

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

✓ Valid SSL (40) ✓ HSTS (20) ✓ CSP (20) ✗ X-Frame (20)

SSL Certificate

Issuer

Let's Encrypt

Valid From

Jan 17, 2026

Valid Until

Apr 17, 2026

64 days remaining

Security Headers

HSTS

CSP

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

incident.io Analysis

FlareScore™: 90/100 (Safe Risk)

Our analysis of incident.io identified 8 positive security indicators and 1 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 7 years 10 months

AI Content Review

23 DNS Records

Analysis Sources

• WHOIS: NameCheap, Inc.
• SSL: Let's Encrypt
• DNS: 23 records analyzed
• Content: Visual & text analysis

Last Checked

Jan 24, 2026
2 weeks ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

7 years 10 months

Registered Mar 24, 2018

Very High Trust

Mar 2018 Expires Mar 2028

Established domain (5+ years) - High trust indicator

Registrar

NameCheap

Registration Date

Mar 24, 2018 (7 years ago)

Last Updated

Mar 02, 2024

Expiration Date

Mar 24, 2028 (771 days remaining)

Server Location

United States

Abuse Contact

[email protected]

+1.9854014545

Domain Name: incident.io
Registry Domain ID: REDACTED
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://www.namecheap.com/
Updated Date: 2024-03-02T15:06:04Z
Creation Date: 2018-03-24T10:12:16Z
Registry Expiry Date: 2028-03-24T10:12:16Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.9854014545
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: REDACTED
Registrant Name: REDACTED
Registrant Organization: Privacy service provided by Withheld for Privacy ehf
Registrant Street: REDACTED
Registrant City: REDACTED
Registrant State/Province: Capital Region
Registrant Postal Code: REDACTED
Registrant Country: IS
Registrant Phone: REDACTED
Registrant Phone Ext: REDACTED
Registrant Fax: REDACTED
Registrant Fax Ext: REDACTED
Registrant Email: REDACTED
Registry Admin ID: REDACTED
Admin Name: REDACTED
Admin Organization: REDACTED
Admin Street: REDACTED
Admin City: REDACTED
Admin State/Province: REDACTED
Admin Postal Code: REDACTED
Admin Country: REDACTED
Admin Phone: REDACTED
Admin Phone Ext: REDACTED
Admin Fax: REDACTED
Admin Fax Ext: REDACTED
Admin Email: REDACTED
Registry Tech ID: REDACTED
Tech Name: REDACTED
Tech Organization: REDACTED
Tech Street: REDACTED
Tech City: REDACTED
Tech State/Province: REDACTED
Tech Postal Code: REDACTED
Tech Country: REDACTED
Tech Phone: REDACTED
Tech Phone Ext: REDACTED
Tech Fax: REDACTED
Tech Fax Ext: REDACTED
Tech Email: REDACTED
Name Server: daisy.ns.cloudflare.com
Name Server: chase.ns.cloudflare.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-01-24T08:18:04Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the registry database. The data in this record is provided by Identity Digital or the Registry Operator for informational purposes only, and accuracy is not guaranteed. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. When using the Whois service, please consider the following: The Whois service is not a replacement for standard EPP commands to the SRS service. Whois is not considered authoritative for registered domain objects. The Whois service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the Whois services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of Whois service access. Abuse of the Whois system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the Whois records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be reasonably confirmed that the requester holds a specific legitimate interest and a proper legal basis for accessing the withheld data. Access to this data provided by Identity Digital can be requested by submitting a request via the form found at https://www.identity.digital/about/policies/whois-layered-access/. The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Identity Digital Inc. and Registry Operator reserve the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

2

A

5

MX

13

TXT

2

NS

1

                                                            aspmx.l.google.com
                                                        

5

                                                            alt1.aspmx.l.google.com
                                                        

5

                                                            alt2.aspmx.l.google.com
                                                        

10

                                                            aspmx2.googlemail.com
                                                        

10

                                                            aspmx3.googlemail.com
                                                        

                                                            apple-domain-verification=4nwgu9vMaEfDtIHv
                                                        

                                                            attio-domain-verification=TKAF94C59ANQRT1EQCC7UGKR
                                                        

                                                            docusign=6ac56b4b-0d61-4b43-b6a6-96f76b8f8624
                                                        

                                                            google-site-verification=AlVl0VzTHbINPbFk-VxN3dLVR5nhCZGdUXkbx6fuIxE
                                                        

                                                            google-site-verification=DmVVQDiQm6lDt5Q93S9yxGUCMWkla3VLbRi-lAWePTA
                                                        

                                                            google-site-verification=NPxsOhtFA_pcJ77WsLD5jMP5K2ltg0Ea7y3U6NDf9yY
                                                        

                                                            google-site-verification=m8MUKu2MkKnZzmkyGyaMmyWLqDnYiuX1SC_S6n7ivXM
                                                        

                                                            google-site-verification=utATsMGCJ8_AdyAtqvy0_3UockkQWOhfQXYoQGh4q6Q
                                                        

                                                            notion-domain-verification=6Gnkgjg6wkIb5d1yidnbk5HoQ6yP6BBHg5BnThZij2P
                                                        

                                                            stripe-verification=f9509908f409a7898f33656370bfaddbd05ad016e74d1124d38a9c02b1052afb
                                                        

                                                            v=spf1 include:_spf.google.com ~all
                                                        

SPF

                                                            1password-site-verification=KUE3Z53WNRGUBKMBSN7YZ5VFEI
                                                        

                                                            MS=ms40657920
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (6)

Content Security Policy

Permissions Policy

Referrer Policy

HSTS

MIME Sniffing Protection

XSS Filter

Web Server

                                            Vercel
                                        

Cache Policy

                                            private, no-cache, n...
                                        

{
    "age": "0",
    "cache-control": "private, no-cache, no-store, max-age=0, must-revalidate",
    "content-encoding": "gzip",
    "content-security-policy": "base-uri 'self';child-src *.hsforms.com;connect-src 'self' *.incident.io https: *.google-analytics.com *.googletagmanager.com *.google.com *.google.co.uk stats.g.doubleclick.net googleads.g.doubleclick.net *.segment.com *.segment.io *.linkedin.com cdn.linkedin.oribi.io *.iubenda.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com *.clearbit.com wss:\/\/*.qualified.com *.qualified.com conversions-config.reddit.com www.redditstatic.com *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com https:\/\/*.greenhouse.io https:\/\/*.api.sanity.io wss:\/\/*.api.sanity.io https:\/\/*.vanta.com https:\/\/*.chilipiper.com vitals.vercel-insights.com website-rb21ahi2c-incident-io-team.vercel.app;default-src 'self';font-src 'self' https: data: fonts.gstatic.com fonts.googleapis.com;form-action 'self' *.hsforms.com;frame-ancestors 'self' https:\/\/incident.sanity.studio https:\/\/www.sanity.io;frame-src 'self' https: *.googletagmanager.com *.twitter.com *.iubenda.com app.qualified.com *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com https:\/\/incident.navattic.com https:\/\/capture.navattic.com;img-src 'self' blob: data: https: *.google-analytics.com *.googletagmanager.com *.google.com *.google.co.uk *.googleusercontent.com stats.g.doubleclick.net *.linkedin.com *.iubenda.com *.clearbitjs.com *.clearbit.com *.qualified.com alb.reddit.com js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com https:\/\/cdn.sanity.io https:\/\/*.chilipiper.com;manifest-src 'self';media-src 'self' https: data: blob:;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https: api.twitter.com platform.twitter.com;style-src 'self' 'unsafe-inline' *.google.com fonts.googleapis.com *.iubenda.com *.hubspotusercontent00.net cdn2.hubspot.net;worker-src 'self';report-uri https:\/\/o494704.ingest.sentry.io\/api\/4505307188232192\/security\/?sentry_key=e6127d8d2f894a18918f2018108426e9;report-to https:\/\/o494704.ingest.sentry.io\/api\/4505307188232192\/security\/?sentry_key=e6127d8d2f894a18918f2018108426e9;",
    "content-type": "text\/html; charset=utf-8",
    "date": "Sat, 24 Jan 2026 08:18:04 GMT",
    "feature-policy": "clipboard-read 'none';clipboard-write 'self';gamepad 'none';speaker-selection 'none';accelerometer 'none';ambient-light-sensor 'none';autoplay 'self' *.youtube.com *.vimeo.com;battery 'none';camera 'none';cross-origin-isolated 'none';display-capture 'none';document-domain 'none';encrypted-media 'self' *.spotify.com;execution-while-not-rendered 'none';execution-while-out-of-viewport 'none';fullscreen 'self' *.youtube.com *.vimeo.com;geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';navigation-override 'none';payment 'none';picture-in-picture 'self' *.youtube.com *.vimeo.com;publickey-credentials-get 'none';screen-wake-lock 'none';sync-xhr 'none';usb 'none';web-share 'none';xr-spatial-tracking 'none';",
    "link": "<\/_next\/static\/media\/5b01f339abf2f1a5.p.woff2>; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font\/woff2\"",
    "permissions-policy": "clipboard-read=(),clipboard-write=(self),gamepad=(),speaker-selection=(),accelerometer=(),ambient-light-sensor=(),autoplay=(self * *),battery=(),camera=(),cross-origin-isolated=(),display-capture=(),document-domain=(),encrypted-media=(self *),execution-while-not-rendered=(),execution-while-out-of-viewport=(),fullscreen=(self * *),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),navigation-override=(),payment=(),picture-in-picture=(self * *),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(),usb=(),web-share=(),xr-spatial-tracking=()",
    "referrer-policy": "strict-origin-when-cross-origin",
    "server": "Vercel",
    "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
    "vary": "RSC, Next-Router-State-Tree, Next-Router-Prefetch",
    "x-content-security-policy": "base-uri 'self';child-src *.hsforms.com;connect-src 'self' *.incident.io https: *.google-analytics.com *.googletagmanager.com *.google.com *.google.co.uk stats.g.doubleclick.net googleads.g.doubleclick.net *.segment.com *.segment.io *.linkedin.com cdn.linkedin.oribi.io *.iubenda.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com *.clearbit.com wss:\/\/*.qualified.com *.qualified.com conversions-config.reddit.com www.redditstatic.com *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com https:\/\/*.greenhouse.io https:\/\/*.api.sanity.io wss:\/\/*.api.sanity.io https:\/\/*.vanta.com https:\/\/*.chilipiper.com vitals.vercel-insights.com website-rb21ahi2c-incident-io-team.vercel.app;default-src 'self';font-src 'self' https: data: fonts.gstatic.com fonts.googleapis.com;form-action 'self' *.hsforms.com;frame-ancestors 'self' https:\/\/incident.sanity.studio https:\/\/www.sanity.io;frame-src 'self' https: *.googletagmanager.com *.twitter.com *.iubenda.com app.qualified.com *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com https:\/\/incident.navattic.com https:\/\/capture.navattic.com;img-src 'self' blob: data: https: *.google-analytics.com *.googletagmanager.com *.google.com *.google.co.uk *.googleusercontent.com stats.g.doubleclick.net *.linkedin.com *.iubenda.com *.clearbitjs.com *.clearbit.com *.qualified.com alb.reddit.com js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com https:\/\/cdn.sanity.io https:\/\/*.chilipiper.com;manifest-src 'self';media-src 'self' https: data: blob:;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https: api.twitter.com platform.twitter.com;style-src 'self' 'unsafe-inline' *.google.com fonts.googleapis.com *.iubenda.com *.hubspotusercontent00.net cdn2.hubspot.net;worker-src 'self';report-uri https:\/\/o494704.ingest.sentry.io\/api\/4505307188232192\/security\/?sentry_key=e6127d8d2f894a18918f2018108426e9;report-to https:\/\/o494704.ingest.sentry.io\/api\/4505307188232192\/security\/?sentry_key=e6127d8d2f894a18918f2018108426e9;",
    "x-content-type-options": "nosniff",
    "x-matched-path": "\/",
    "x-permitted-cross-domain-policies": "none",
    "x-vercel-cache": "MISS",
    "x-vercel-id": "fra1::lhr1::bqrnb-1769242683464-84a3d732665c",
    "x-webkit-csp": "base-uri 'self';child-src *.hsforms.com;connect-src 'self' *.incident.io https: *.google-analytics.com *.googletagmanager.com *.google.com *.google.co.uk stats.g.doubleclick.net googleads.g.doubleclick.net *.segment.com *.segment.io *.linkedin.com cdn.linkedin.oribi.io *.iubenda.com https:\/\/*.hotjar.com https:\/\/*.hotjar.io wss:\/\/*.hotjar.com *.clearbit.com wss:\/\/*.qualified.com *.qualified.com conversions-config.reddit.com www.redditstatic.com *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com https:\/\/*.greenhouse.io https:\/\/*.api.sanity.io wss:\/\/*.api.sanity.io https:\/\/*.vanta.com https:\/\/*.chilipiper.com vitals.vercel-insights.com website-rb21ahi2c-incident-io-team.vercel.app;default-src 'self';font-src 'self' https: data: fonts.gstatic.com fonts.googleapis.com;form-action 'self' *.hsforms.com;frame-ancestors 'self' https:\/\/incident.sanity.studio https:\/\/www.sanity.io;frame-src 'self' https: *.googletagmanager.com *.twitter.com *.iubenda.com app.qualified.com *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com https:\/\/incident.navattic.com https:\/\/capture.navattic.com;img-src 'self' blob: data: https: *.google-analytics.com *.googletagmanager.com *.google.com *.google.co.uk *.googleusercontent.com stats.g.doubleclick.net *.linkedin.com *.iubenda.com *.clearbitjs.com *.clearbit.com *.qualified.com alb.reddit.com js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com https:\/\/cdn.sanity.io https:\/\/*.chilipiper.com;manifest-src 'self';media-src 'self' https: data: blob:;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https: api.twitter.com platform.twitter.com;style-src 'self' 'unsafe-inline' *.google.com fonts.googleapis.com *.iubenda.com *.hubspotusercontent00.net cdn2.hubspot.net;worker-src 'self';report-uri https:\/\/o494704.ingest.sentry.io\/api\/4505307188232192\/security\/?sentry_key=e6127d8d2f894a18918f2018108426e9;report-to https:\/\/o494704.ingest.sentry.io\/api\/4505307188232192\/security\/?sentry_key=e6127d8d2f894a18918f2018108426e9;",
    "x-xss-protection": "1; mode=block"
}

IP Geolocation

Server location and network information

United States

Walnut

IP Address

76.76.21.98

ISP / Hosting

Amazon.com, Inc.

Coordinates

34.0233, -117.8512

Country Code

US

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:_spf.google.com ~all

DKIM

Configured

DMARC

v=DMARC1; p=quarantine; rua=mailto:[email protected]...

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.57s

Excellent

Page Size

0.54MB

Optimized

Requests

156

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.incident.io

api.incident.io

assets.incident.io

app.incident.io

help.incident.io

Privacy & Trackers

1 Trackers Found

Google Tag Manager

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

Incident.io provides an all-in-one incident management platform designed to streamline on-call scheduling, real-time incident response, and status page integration. It aims to help teams resolve incidents faster and minimize downtime.

Security Assessment

The website demonstrates a strong security posture. A valid SSL certificate issued by Let's Encrypt ensures encrypted communication. The domain is relatively old (7+ years), indicating stability. Critically, Google Safe Browsing reports a CLEAN status, a significant positive signal. Hosted in the US via Amazon.com, Inc., leverages robust infrastructure.

Trust Level

With a FlareScore of 90/100, incident.io presents a low-risk profile. The high score reflects the positive security indicators, including the clean Google Safe Browsing report and valid SSL.

Recommendations

While incident.io appears safe, remember general online safety.

Always use strong, unique passwords if you create an account.
Be mindful of phishing attempts that may impersonate incident.io.
Review the service's terms of service before payment.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

incident.io

FlareAI™ Summary