Intus Care · Domain Security

Intus Care Domain Security

Domain security

Domain security posture for Intus Care, probed live across 4 host(s) and 2 registrable domain(s). 4 host(s) serve HTTPS (up to TLSv1.3); 3 advertise HSTS. Email/DNS controls: DNSSEC absent, SPF present, DMARC present (p=none).

Health CareElectronic Health RecordsPopulation HealthRisk AdjustmentSenior CareValue-Based CareAnalyticsComplianceUtilization ManagementPACE

Transport & Host Security

intuscare.com

HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Oct 8 02:07:07 2026 GMT

intus.care

HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Oct 24 12:22:53 2026 GMT

carehub.intus.care

HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Sep 18 23:59:59 2026 GMT

iris.intus.care

HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Sep 18 23:59:59 2026 GMT

Domain (DNS/Email) Security

intuscare.com

DNSSEC: no · SPF: yes · DMARC: yes (p=none) · CAA: none

intus.care

DNSSEC: no · SPF: yes · DMARC: yes (p=quarantine) · CAA: none

Source

Domain Security

generated: '2026-08-23'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml hosts plus the two authenticated product
  hosts discovered from the intuscare.com navigation (carehub.intus.care, intus.care)
hosts:
- host: intuscare.com
  role: marketing site (WordPress on SiteGround)
  https: true
  tls_version: TLSv1.3
  cert_expires: 'Oct  8 02:07:07 2026 GMT'
  hsts: false
  note: >-
    Every path on this host answers HTTP 202 with a SiteGround "sgcaptcha" JavaScript
    proof-of-work interstitial rather than the page, including /robots.txt and /llms.txt.
- host: intus.care
  role: population health / IRIS analytics application (authenticated)
  https: true
  tls_version: TLSv1.3
  cert_expires: 'Oct 24 12:22:53 2026 GMT'
  hsts: true
  hsts_header: 'max-age=15552000; includeSubDomains'
  hsts_preload: false
- host: carehub.intus.care
  role: CareHub EMR application (authenticated, Next.js)
  https: true
  tls_version: TLSv1.3
  cert_expires: 'Sep 18 23:59:59 2026 GMT'
  hsts: true
  hsts_header: 'max-age=31536000; includeSubDomains; preload'
  hsts_preload: true
- host: iris.intus.care
  role: IRIS risk adjustment application (authenticated)
  https: true
  tls_version: TLSv1.3
  cert_expires: 'Sep 18 23:59:59 2026 GMT'
  hsts: true
  hsts_header: 'max-age=31536000; includeSubDomains; preload'
  hsts_preload: true
domains:
- domain: intuscare.com
  dnssec: false
  caa: []
  spf: true
  spf_record: 'v=spf1 include:spf.efwd.registrar-servers.com include:spf.easywp.com ~all'
  dmarc: true
  dmarc_policy: none
- domain: intus.care
  dnssec: false
  caa: []
  spf: true
  spf_record: 'v=spf1 include:spf.protection.outlook.com include:mail.zendesk.com include:49558872.spf07.hubspotemail.net -all'
  dmarc: true
  dmarc_policy: quarantine
  dmarc_subdomain_policy: quarantine
  dmarc_rua: present (address withheld)
findings:
- Both product hosts (carehub, iris) send HSTS with includeSubDomains and preload; the
  marketing host sends no HSTS at all.
- Neither domain publishes a CAA record and neither is DNSSEC-signed.
- intus.care enforces SPF with a hard fail (-all) and a DMARC quarantine policy;
  intuscare.com uses a soft-fail SPF (~all) and p=none, so the marketing domain is the
  weaker of the two for spoofing.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/intus-care-domain-security"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.