iconplc.com

HTML metadata

Title: ICON plc | Clinical Research Organisation (CRO) for Drug Development
Description: ICON is the world's leading clinical research organisation, providing outsourced clinical development and commercialisation services to the pharmaceutical, biotechnology and medical device industries.
Language: en
Generator: Drupal 11 (https://www.drupal.org)
Canonical: https://www.iconplc.com/

Open Graph

url: https://www.iconplc.com/home
title: Home | ICON plc
site name: ICON plc

Technology

CDN: Akamai
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (4)

icon.widen.net×42
maxcdn.bootstrapcdn.com×1
static.addtoany.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

2007-09-08

Expires

2030-09-08 1573 days left

Updated

2025-03-12

Name servers

brit.ns.cloudflare.com
cory.ns.cloudflare.com

DNS records live

NS

brit.ns.cloudflare.com
cory.ns.cloudflare.com

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 33 TXT records

google-site-verification=D3aZngooKdh67tzsphjylsJ-HbQnR0rIbhnV_NAeYwM
cisco-ci-domain-verification=6fdc257222e5e160119bbd30e2e6e057101b355f639d5752d52601557018ff6c
zenqms-domain-verification=5d305c84c166c63b6713c966fc07ddebcc8500e665d936113ad4df27521a9df4
adobe-idp-site-verification=47bdeb2a-d704-474b-9da8-eda55868433f
pardot_36932_*=4d25652ab1a0505c50a30bf5a8d182064f7dd0c2858cec4da6e06e1235372191
HDUqRSmIspvAwxDep+eAh/caG8rv+vYcVtihZmNlZVRzVKMPWxGlzGcdRhBHaP6GLEK28ojnrf8KTjcHH9EyXg==
amazonses:mTVil7T7bnHoXk/fl8Rc8Do+sNPlcdh9wg5aYl4829Q=
atlassian-domain-verification=k8lp6vayCVfzXybXqs7Zt0qqTiZZ1VdbkbAp6WCSaaGxM6wlmM7Tmk6OrXr3mRPi
teamviewer-sso-verification=43ec4326391c4115b1c500979a9453d6
webexdomainverification.2KJB5=8ee03e16-f1ab-4a28-8fef-c3a04cd2bbd8
webexdomainverification.4C675B8BB7AFB136E053AB06FC0A3F65=2347dee9-8d26-4de3-8c68-96f75eafa2ad
adobe-sign-verification=63e2cbd432f7335b8a866fdc163f0919
IMovlBG6nd0kSwIFl5lvC5EhuVOzqPvtd8P4Wxl/LMVO8kqDDj3I3BST3nCL2WDlJ981bQUI/ysEnCjEIlo6Qw==
amazonses:s8M60nIO3QGaXsgN6TQwwoAZYhJNEV/a0IqkAAXrRIU=
jamf-site-verification=uS6nczucYw92TE-lB7xrLg
amazonses:EHeftdPwGZFHOMcQfUGmQdhC2mCNMV7kvKm7M3/Kz7U=
zenqms-domain-verification=35d87a1d82fdec4924d1d40c4a0c13c0eb89e205ef94c32fe09d321a517e4c31
adobe-sign-verification=3f4ea3c2485d42913ab5eb1f734f32df
onetrust-domain-verification=8a6390a7e02d43b39221908e84fc5de8
airtable-verification=9129787f62225fc66d40db46307028c5
miro-verification=922a44f8e2cc692716c3cac3dc967c5bb81b8433
cisco-ci-domain-verification=5dccd72c95164528b040f7cf36b14cd6dbcef399862a0fa6169ff20333c495ac
atlassian-domain-verification=qG2fnRSgcat2uvmZCADEV0S2yuXkwM5pIjbFjgMFw2cO7wbuq9mw1RCmFB5y0jj8
workos-domain-verification=cf3396e8e1970798eacb0b22d021d4b385773e68
cloudflare_dashboard_sso=1239a5ad71ed9ac9c7b086b44d8a58a4
amazonses:zdF9riU8tG9TX5sI4YgGpOYUZAs5FsfTLXHloT0NGEk=
onetrust-domain-verification=423c8983259c48288c0a03383751192b
atlassian-domain-verification=1pMvx9/7NFqot210yasqwvjbB6IDI3DHnYXm6xqRUPEDPG0TEtaCHStY4Xqe3SuK
MS=ms49573571
apple-domain-verification=thfhUMeg8rxx9rT0
xp6c0gvy4rpnbft0rd12t0qwv4t1pks0
figma-domain-verification=f7ce7c94c0e67b856ec2a84149d1f4448b5aac217ee200204c2297fb958b99c8-1732637804
google-site-verification=xCB6zbPUKW06bYPcO6db3_Aj4d3IM8FBB6UCzGVOCh8

Email authentication strong

SPF

v=spf1 exists:%{i}._i.%{d}._d.espf.agari.com include:%{d}.ee.spf-protect.agari.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:icon@rua.agari.com; ruf=mailto:icon@ruf.agari.com

policy: reject (enforced)

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcgiQx1c6IBOfHJT9AtcyztPwytVr08VyeswbUW8c9ak4n+Ejnd6kKajzFvZz8gmoOKFtP+PoC19/1…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-08-19 to 2026-08-19

Expires in 92 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.iconplc.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src 'self' data: https://maxcdn.bootstrapcdn.com; img-src 'self' data: https://www.google.com https://www.google.co.za https://icon.widen.net *.prod.acquia-sites.com https://px.ads.linkedin.com https://cdn.cookielaw.org https://www.facebook.com https://ade.googlesyndication.com https://*.widencdn.net https://metrics.brightcove.com https://www.google-analytics.com https://*.boltdns.net https://www.googletagmanager.com https://tracking.monsido.com https://hostedseal.trustarc.com https://*.mapi-trust.org https://*.accellacare.com https://*.iconplc.com https://cdn.jsdelivr.net https://cdn.monsido.com/page-assist/v2/assets/img/uaccess.svg https://cdn.monsido.com/page-assist/v2/assets/img/default-spinner.png; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com www.google.com www.gstatic.com www.google-analytics.com www.googletagmanager.com apis.google.com js-agent.newrelic.com https://cdn.cookielaw.org gtm.js www.tagassistant.google.com cdn.jsdelivr.net h
strict-transport-security: max-age=15768000