IcorIQ research probe

If you found this page from a log entry or reverse-DNS lookup, a connection you saw from one of our IP addresses was part of a measurement research project by IcorIQ (icoriq.com). This page explains exactly what we do, what we don't, and how to make us stop.

What we do

We are building a cyber-resilience score for small-business hosting, and we validate its measurements against real, publicly-visible server behavior. Our probes make benign, low-volume connections to public services only:

• an HTTP GET of your homepage (/) — headers only, like any browser;
• a TLS handshake — to record protocol versions and certificate dates;
• DNS queries — public records only;
• TCP connection attempts on a small fixed set of ports commonly used by hosting control panels (80, 443, 2082, 2083, 8443).

Each domain sees at most one probe visit per month, rate-limited so our traffic is indistinguishable from a single cautious visitor.

What we never do

• No login or authentication attempts, ever.
• No password, credential, or form submission.
• No vulnerability scanning or exploitation.
• No crawling — we never go past the front page.
• No traffic volumes that could affect your service.

What we store

Response headers, TLS/certificate metadata, DNS records, and whether a port accepted a connection — fingerprint metadata only, never page content. Results are used only in aggregate (e.g. "X% of a 100+-site cohort"): we never publish, show, or sell a score or finding about an individual site.

Opt out — permanently, no questions asked

Email research-optout@icoriq.com with the domain(s) or IP range(s) to exclude. Opt-outs are:

• honored before the next monthly sweep — usually within minutes, because our probe runner refuses listed targets structurally;
• permanent — we keep the exclusion unless you ask us to remove it;
• inclusive of subdomains (for domains) and whole ranges (for CIDR blocks) — a hosting provider can exclude its entire network with one entry.

Any abuse complaint is treated as an immediate opt-out.

Already working with us? Revoking consent

If your organization granted IcorIQ consent to monitor its domains — as a customer, or as a hosting provider on behalf of its estate — that grant is revocable at any time. Email research-optout@icoriq.com from a contact address associated with your account, naming the domain(s) or the whole estate. We action revocations on receipt; once a grant is revoked, all collection under it stops immediately. Revoking consent is independent of the opt-out above — either one is enough to stop probes.

Contact

IcorIQ — research@icoriq.com. Probes originate only from the static IP addresses listed below, whose reverse DNS points back to this page.

Our probe IP addresses

• 34.76.148.29 (research-probe.icoriq.com)