useindio.com

HTML metadata

Title: Digital Forms for Insurance Submissions & Applications | Indio
Description: Modernize the insurance submissions and applications process with Indio Software to create an online, digital, user-friendly experience for agencies, brokers and insureds.
Language: en
Canonical: /

Open Graph

url: https://www.useindio.com/
title: Indio

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (7)

view.ceros.com×3
insight.appliedsystems.com×2
www.googletagmanager.com×2
cdn.bizible.com×1
cdn.cookielaw.org×1
px.ads.linkedin.com×1
www.facebook.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2016-08-01

Expires

2026-08-01 74 days left

Updated

2025-07-01

Name servers

aiden.ns.cloudflare.com
marissa.ns.cloudflare.com

DNS records live

NS

aiden.ns.cloudflare.com
marissa.ns.cloudflare.com

MX

10 useindio-com.mail.protection.outlook.com

TXT

Show 4 TXT records

ca3-f7cdf758da784c5a9b5f096fbe627f40
google-site-verification=oigXHT8ZzI_tjwqt0439f3thdeJ9YdrtCPtGSxhRpPY
lucid-verification=fjh@rfd7zan7dxm4VNH
00Ddx000004covx=1TBdx00000000mP;00Ddx000004cpX3=1TBdx000000017O;00Dbb000003xSeU=1TBbb0000000A4E

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:mail.zendesk.com include:_spf.salesforce.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:re+bquri8n0qhn@dmarc.postmarkapp.com; sp=none; aspf=r;

policy: quarantine · sp=none

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aBjG4e3pxNLuSH1ZGQCyEqJF/kZR0wGBkNcrgi5np/t+K3jOqea66+gIEilpjKwgAK+BozNiJCuse…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxr40F7+Fc765jZYKLODKaZCkPj4e2Y0FXhA1msLnkYjxOA4NA3CKtSHAHUZq9X1luXYs0mIluJZT/…

selectors probed

Certificate (current)

WE1

from 2026-05-06 to 2026-08-04

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.useindio.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://view.ceros.com https://www.googletagmanager.com https://code.jquery.com https://cdn.jsdelivr.net https://app-abk.marketo.com https://*.marketo.com https://*.ivans.com https://munchkin.marketo.net https://js.driftt.com https://*.driftt.com https://players.brightcove.net https://*.brightcove.com https://*.brightcove.net https://form.jotform.com https://*.jotform.com https://*.buzzsprout.com https://vwo.com https://*.vwo.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://cdn-cookieyes.com https://*.cookieyes.com https://vjs.zencdn.net https://*.zencdn.net https://*.boltdns.net https://snap.licdn.com https://*.licdn.com https://px.ads.linkedin.com https://bat.bing.com https://*.bing.com https://static.oktopost.com https://*.oktopost.com https://tracking.g2crowd.com https://*.g2crowd.com https://js.idio.co https://*.idio.co https://cdn.bizible.com https://*.bizible.com http
strict-transport-security: max-age=15768000; includeSubDomains; preload