pearlscore.com

HTML metadata

Title: The Standard in Home Performance Rating | Pearl
Description: Pearl, a certified B Corporation, is making home performance improvements compelling for homeowners, visible to home buyers, and valued by the market.
Language: en-US
Generator: SEOmatic
Canonical: https://pearlscore.com/

Open Graph

url: https://pearlscore.com/
title: The Standard in Home Performance Rating
locale: en_US
site name: Pearl
description: Pearl, a certified B Corporation, is making home performance improvements compelling for homeowners, visible to home buyers, and valued by the market.

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Analytics
Google Tag Manager

Ads

Google Ads

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (11)

fonts.googleapis.com×2
js.hs-scripts.com×2
www.googletagmanager.com×2
dev.visualwebsiteoptimizer.com×1
p.typekit.net×1
share.hsforms.com×1
unpkg.com×1
use.typekit.net×1
www.google-analytics.com×1
www.google.com×1
www.googleadservices.com×1

Social

Contact

Phone

+18885575543

Address

St. Ste 2Charlottesville, VA 22902

Registration

Registrar

Porkbun LLC

Created

2024-09-17

Expires

2026-09-17 120 days left

Updated

2025-09-16

Name servers

kira.ns.cloudflare.com
tony.ns.cloudflare.com

DNS records live

NS

kira.ns.cloudflare.com
tony.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 9 TXT records

3702705830
Fathom_DomainChange
MS=ms10304131
google-site-verification=MfJQBrow16m_-WUr0l-MPeDyDaqcurG8FPmst4GycP0
google-site-verification=hWIQKfvrF-uOU-VAAZ7-Pu5Qf-31wQfClUtoP8C5uxg
knowbe4-site-verification=12360ec9331bd549e72b449e1dbd8cda
openai-domain-verification=dv-5NEPTXl1bp44w4GHTlA5xwuL
rippling-domain-verification=a003f2193e6ba81f
stripe-verification=5EFE69B488EB221A5FEF60AB0A9247582FCD5EC1796051C9FD6BF25A5EC5B20E

Email authentication weak

SPF: v=spf1 include:_spf.google.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-08 to 2026-07-07

Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://pearlscore.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(self), autoplay=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), midi=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), xr-spatial-tracking=(self), clipboard-read=(self), clipboard-write=(self)
x-content-type-options: nosniff
content-security-policy: default-src https: data:; frame-ancestors 'self' pearlpro.app *.pearlpro.app https://pearlscore.com https://*.pearlscore.com; script-src https: 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com; style-src https: 'unsafe-inline' https://*.hotjar.com; object-src https:; img-src https: data: https://*.hotjar.com; font-src https: data: https://*.hotjar.com; base-uri 'self'; connect-src https: https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload