Domain > remote.icrqa.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-02	222.122.213.185 (ClassC)

Port 80

HTTP/1.1 403 ForbiddenCache-Control: privateContent-Type: text/html; charsetutf-8Server: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sat, 02 Nov 2024 04:16:21 GMTContent-Length: 4782

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd> html xmlnshttp://www.w3.org/1999/xhtml> head> title>IIS 10.0 Detailed Error - 403.503 - Forbidden/title> style typetext/css> !-- body{margin:0;font-size:.7em;font-family:Verdana,Arial,Helvetica,sans-serif;} code{margin:0;color:#006600;font-size:1.1em;font-weight:bold;} .config_source code{font-size:.8em;color:#000000;} pre{margin:0;font-size:1.4em;word-wrap:break-word;} ul,ol{margin:10px 0 10px 5px;} ul.first,ol.first{margin-top:5px;} fieldset{padding:0 15px 10px 15px;word-break:break-all;} .summary-container fieldset{padding-bottom:5px;margin-top:4px;} legend.no-expand-all{padding:2px 15px 4px 10px;margin:0 0 0 -12px;} legend{color:#333333;;margin:4px 0 8px -12px;_margin-top:0px; font-weight:bold;font-size:1em;} a:link,a:visited{color:#007EFF;font-weight:bold;} a:hover{text-decoration:none;} h1{font-size:2.4em;margin:0;color:#FFF;} h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.4em;margin:10px 0 0 0;color:#CC0000;} h4{font-size:1.2em;margin:10px 0 5px 0; }#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:trebuchet MS,Verdana,sans-serif;  color:#FFF;background-color:#5C87B2; }#content{margin:0 0 0 2%;position:relative;} .summary-container,.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;} .content-container p{margin:0 0 10px 0; }#details-left{width:35%;float:left;margin-right:2%; }#details-right{width:63%;float:left;overflow:hidden; }#server_version{width:96%;_height:1px;min-height:1px;margin:0 0 5px 0;padding:11px 2% 8px 2%;color:#FFFFFF;  background-color:#5A7FA5;border-bottom:1px solid #C1CFDD;border-top:1px solid #4A6C8E;font-weight:normal;  font-size:1em;color:#FFF;text-align:right; }#server_version p{margin:5px 0;} table{margin:4px 0 4px 0;width:100%;border:none;} td,th{vertical-align:top;padding:3px 0;text-align:left;font-weight:normal;border:none;} th{width:30%;text-align:right;padding-right:2%;font-weight:bold;} thead th{background-color:#ebebeb;width:25%; }#details-right th{width:20%;} table tr.alt td,table tr.alt th{} .highlight-code{color:#CC0000;font-weight:bold;font-style:italic;} .clear{clear:both;} .preferred{padding:0 5px 2px 5px;font-weight:normal;background:#006633;color:#FFF;font-size:.8em;} --> /style>  /head> body> div idcontent> div classcontent-container>   h3>HTTP Error 403.503 - Forbidden/h3>   h4>You do not have permission to view this directory or page./h4> /div> div classcontent-container>  fieldset>h4>Most likely causes:/h4>   ul> 	li>This is a generic 403 error and means the authenticated user is not authorized to view the page./li> /ul>  /fieldset> /div> div classcontent-container>  fieldset>h4>Things you can try:/h4>   ul> 	li>Create a tracing rule to track failed requests for this HTTP status code. For more information about creating a tracing rule for failed requests, click a hrefhttp://go.microsoft.com/fwlink/?LinkID66439>here/a>. /li> /ul>  /fieldset> /div>  div classcontent-container>  fieldset>h4>Detailed Error Information:/h4>   div iddetails-left>    table border0 cellpadding0 cellspacing0>     tr classalt>th>Module/th>td>   IpRestrictionModule/td>/tr>     tr>th>Notification/th>td>   BeginRequest/td>/tr>     tr classalt>th>Handler/th>td>   ExtensionlessUrlHandler-Integrated-4.0/td>/tr>     tr>th>Error Code/th>td>   0x80070005/td>/tr>         /table>   /div>   div iddetails-right>    table border0 cellpadding0 cellspacing0>     tr classalt>th>Requested URL/th>td>   http://remote.icrqa.com:80//td>/tr>     tr>th>Physical Path/th>td>   E:\inetpub\wwwroot/td>/tr>     tr classalt>th>Logon Method/th>td>   Not yet determined/td>/tr>     tr>th>Logon User/th>td>   Not yet determined/td>/tr>         /table>    div classclear>/div>   /div>  /fieldset> /div>  div classcontent-container>  fieldset>h4>More Information:/h4>   This generic 403 error means that the authenticated user is not authorized to use the requested resource. A substatus code in the IIS log files should indicate the reason for the 403 error. If a substatus code does not exist, use the steps above to gather more information about the source of the error.   p>a hrefhttps://go.microsoft.com/fwlink/?LinkID62293&IIS70Error403,503,0x80070005,17763>View more information »/a>/p>     /fieldset> /div> /div> /body> /html>

Subdomains

Date	Domain	IP
mail1.icrqa.com	2024-09-15	222.122.213.185
imap1.icrqa.com	2024-09-15	222.122.213.185
smtp1.icrqa.com	2024-09-15	222.122.213.185
mx1.icrqa.com	2024-10-29	222.122.213.185
mail2.icrqa.com	2024-09-15	222.122.213.185
imap2.icrqa.com	2024-09-15	222.122.213.185
smtp2.icrqa.com	2024-09-15	222.122.213.185
ns2.icrqa.com	2024-09-15	222.122.213.185
mx2.icrqa.com	2024-11-02	222.122.213.185
pop3.icrqa.com	2024-10-14	222.122.213.185
mail4.icrqa.com	2024-09-27	222.122.213.185
mx7.icrqa.com	2024-09-15	222.122.213.185
mail9.icrqa.com	2024-09-15	222.122.213.185
poczta.icrqa.com	2024-09-15	222.122.213.185
exchange.icrqa.com	2024-09-15	222.122.213.185
secure.icrqa.com	2024-11-02	222.122.213.185
mailgate.icrqa.com	2024-11-02	222.122.213.185
remote.icrqa.com	2024-11-02	222.122.213.185
auth.icrqa.com	2024-09-15	222.122.213.185
smtpauth.icrqa.com	2024-09-22	222.122.213.185
l.icrqa.com	2024-09-29	222.122.213.185
mail.icrqa.com	2024-09-15	222.122.213.185
m.icrqa.com	2024-10-27	222.122.213.185
spam.icrqa.com	2024-09-15	222.122.213.185
mailin.icrqa.com	2024-09-15	222.122.213.185
imap.icrqa.com	2024-09-14	222.122.213.185
ftp.icrqa.com	2024-09-28	222.122.213.185
smtp.icrqa.com	2024-10-02	222.122.213.185
authsmtp.icrqa.com	2024-09-15	222.122.213.185
mailer.icrqa.com	2024-09-15	222.122.213.185
mailserver.icrqa.com	2024-09-15	222.122.213.185
ns.icrqa.com	2024-09-15	222.122.213.185
smtps.icrqa.com	2024-09-22	222.122.213.185
mailhost.icrqa.com	2024-09-15	222.122.213.185
post.icrqa.com	2024-10-01	222.122.213.185
mailgw.icrqa.com	2024-09-15	222.122.213.185
mailx.icrqa.com	2024-10-29	222.122.213.185
mx.icrqa.com	2024-10-07	222.122.213.185
a.mx.icrqa.com	2024-10-02	222.122.213.185
relay.icrqa.com	2024-09-15	222.122.213.185

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > remote.icrqa.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains