qualia.com

HTML metadata

Title: Digital Real Estate Closing Platform and Settlement Software | Qualia
Description: Qualia is the leading digital real estate closing platform. Qualia's cloud-based title, escrow, and closing software brings lenders, title & escrow companies, consumers, real estate agents, and all other transaction participants together into one secure platform to simplify how homes are bought and sold.
Language: en
Generator: DocPad v6.79.4
Canonical: /

Open Graph

title: Digital Real Estate Closing Platform and Settlement Software | Qualia

Technology

CDN: Amazon CloudFront
Server: AmazonS3

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (11)

app.usercentrics.eu×3
play.vidyard.com×3
privacy-proxy.usercentrics.eu×3
cdn.jsdelivr.net×2
cdnjs.cloudflare.com×2
www.googletagmanager.com×2
ajax.googleapis.com×1
api.usercentrics.eu×1
js.hs-scripts.com×1
js.hsforms.net×1
js.qualified.com×1

Social

Contact

Phone

855-441-5498

Registration

Registrar

NameCheap, Inc.

Created

2000-03-02

Expires

2028-03-02 652 days left

Updated

2018-03-22

Name servers

ns-1312.awsdns-36.org
ns-1735.awsdns-24.co.uk
ns-485.awsdns-60.com
ns-525.awsdns-01.net

DNS records live

NS

ns-1312.awsdns-36.org
ns-1735.awsdns-24.co.uk
ns-485.awsdns-60.com
ns-525.awsdns-01.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 17 TXT records

google-site-verification=1Hw96UqQOZVQy_-ow0chQJ4JmQvY2hzY8043W2Oa7Dw
google-site-verification=rGakPWAacmkTKuFDCGsv4fw1lDBkgjtHs6MWR2PAYzM
google-site-verification=MqqabDhd5QwReBbKlptmH4Slme0dH-3nzT-gczo2JY8
9i77ian58d3he0osbcr4edihva
apple-domain-verification=4NaK9AX48kty0j26
atlassian-domain-verification=pJtX9XnVOKqJJNTvT3v5k8T43EhSNBEkEf1O8rkrZPaFruZDSdYXggzvjOy0C5Lw
MS=94D4497A366184B46B6D3D7F9BF3A0E4E63FDAAF
postman-domain-verification=648bb4eeafd1ace30d18dfed7c2962e40a33943eda9d547bd833141c5d83f128cf1e190cdbf17d37c4eaf3de03263684f79a4f526af6c80f6b42e072fa201518
mongodb-site-verification=GydTXbjiSG0NHtdorLAlj1TeH94AM31X
google-site-verification=Wgqn3Qjhj8YhtmQW8Hsnf8fsBrmkT6LQ04OguVs7dvQ
dell-technologies-domain-verification=qualia.com_4fc5cebf-ce42-4796-90f9-e80e5a3f18ad_1770477300
twilio-domain-verification=df1a95354347627744e5424a8c8788d8
intacct-esk=B7B4D57677041839E0539A220D0ADACF
google-site-verification=0mcxvTCrNSt8jMnC-bEF8h0iaJQ8b--_AvcWcIzfis8
dropbox-domain-verification=6frjgt8munm5
logmein-verification-code=A82KViMpBtIexhQ2JXDT9L4qn
MS=ms86145634

Email authentication strong

SPF

v=spf1 include:mail.zendesk.com include:_spf.google.com include:_spf.salesforce.com include:2336906.spf07.hubspotemail.net include:_spf.intacct.com include:spflat.qualia.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:mailauth-reports@qualia.com,mailto:rua-import-26334@sendforensics.com

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdum9t+TGVAfAS+F8kDlOPOjaolroA5KNV/V8+Z5l4jepuv4HeyVXCTPRwbQqPaz04C2wKYnRY21R4LmQGKk…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CPjIwVH/jfTIoGFFFpyMoeeXZqrM4hma7/Kt5OjTjWA02AcFZO+rsSKUQnzASg3slpEavnfJFet6ZeJJO…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDpDCE+FicPuc28f0mppTrjpIHMXo2RQw3wFWU/R5xn657Frh4zF3XSCVkin4R9ZgxUAS/TDQwC5wLf3Y7EmuQZtZ…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2026-03-13 to 2026-09-27

Expires in 131 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.qualia.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self' data: ; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com cdn.jsdelivr.net ajax.googleapis.com js.hs-scripts.com js.hsleadflows.net js.hs-analytics.net *.google-analytics.com *.googletagmanager.com sjs.bizographics.com js.driftt.com bat.bing.com connect.facebook.net web-analytics.engagio.com *.salesloft.com *.adroll.com *.cloudfront.net maps.googleapis.com d.adroll.mgr.consensu.org https://optimize.google.com *.licdn.com *.fullstory.com fullstory.com js.hs-banner.com https://tagmanager.google.com *.demandbase.com *.intercom.io *.intercomcdn.com https://play.vidyard.com https://www.googleadservices.com https://googleads.g.doubleclick.net *.hsforms.net https://*.usercentrics.eu *.6sc.co *.6sense.com https://scripts.simpleanalyticscdn.com https://js.qualified.com *.mouseflow.com https://*.amplitude.com js.hubspot.com https://www.google.com https://www.gstatic.com; img-src * 'self' data: *.hubspot.com *.google-analytics.com stats
strict-transport-security: max-age=63072000; includeSubdomains; preload