Site Health Report Card

booking.com

  • Booking.com
  • Travel · Hotels
  • Online since 1996
  • Checked Sep 30, 2026

“Only one room left. Page still loading.”

Pica's take. Booking.com loads with urgency: countdowns, badges, and thirty-one outside scripts all telling you to hurry. The locks are good and the building is its own. Pica booked nothing. Pica felt pressured.

B86 / 100

Overall health

#81 of 100 sites graded

  • Largest paint

    3.8s

  • Page weight

    6.2 MB

  • Requests

    220

  • Third-party scripts

    31

  • Domain age

    30 yrs

  • Blocklists

    0 / 60

Timed by our own browser

Site Speed

D
65

Needs a look.

Largest paint (LCP)
3.8s
First paint (FCP)
1.8s
Server response (TTFB)
360 ms
Layout shift (CLS)
0.11
Page weight
6.2 MB
Requests
220

Pica: Six megabytes and four 'only one left!' badges.

Run the Speed Test on booking.com

A look from the outside

Security Check

B
85

Solid, with a quibble or two.

HTTPS everywhere
Yes
HSTS
Preloaded
TLS
1.3
Content Security Policy
Partial
Mixed content
None
Third-party scripts
31

Pica: Thirty-one outside scripts, every one of them in a hurry.

Run the Hack Check on booking.com

What the internet says about it

Reputation Check

A
95

In excellent shape.

Domain age
30 years
Blocklists
0 of 60
Malware reports
None
Email authentication
DMARC reject
Certificate
Valid · 90 days
Lookalike domains
Plenty

Pica: Thirty years old. Plenty of lookalikes; always check the address.

Run the Tracker Check on booking.com

Is it in a good neighborhood?

Hosting Check

A+
100

In excellent shape.

Network
Booking · AS43996
Content delivery
Akamai
IPv6
Yes
HTTP/3
Yes
Shared-IP neighbors
Shared CDN, well kept
Flagged neighbors
0

Pica: Own network, Akamai out front. Nice lobby.

Run the TTFB Check on booking.com

Want a report card for your site?

Pica runs these checks on your site every day, and only writes when a grade slips. $11.11 a month for 50 sites.

Watch my website

More report cards

Browse all 100

How we grade. Four checks, weighted equally: speed timed by our own browser, a security look from the outside, public reputation signals, and the network the site lives on. A look from the outside is not a server audit.