This is what I have in the ICM host buffer right now:
web1 and web1.domain (blanked out for privacy reasons) is CORRECT.
The 'yellow' triangle atsl entry is the old incorrect one that comes up in dev_icm.
Still can't work out where this is coming from... no proxies should be involved...