Site Health Report Card

instagram.com

  • Instagram
  • Social · Good lighting
  • Online since 2010
  • Checked Sep 30, 2026

“Gorgeous. Heavy. Filtered.”

Pica's take. Instagram looks wonderful and weighs about as much as its photos suggest. It shares a very secure house with Facebook, so the locks are excellent and the family resemblance is strong. Speed is fine once it stops arranging the lighting.

A-92 / 100

Overall health

#41 of 100 sites graded

  • Largest paint

    3.4s

  • Page weight

    6.1 MB

  • Requests

    150

  • Third-party scripts

    1

  • Domain age

    16 yrs

  • Blocklists

    0 / 60

Timed by our own browser

Site Speed

C-
71

Gets there, with notes.

Largest paint (LCP)
3.4s
First paint (FCP)
1.9s
Server response (TTFB)
310 ms
Layout shift (CLS)
0.06
Page weight
6.1 MB
Requests
150

Pica: Six megabytes, all perfectly lit.

Run the Speed Test on instagram.com

A look from the outside

Security Check

A+
100

In excellent shape.

HTTPS everywhere
Yes
HSTS
Preloaded
TLS
1.3
Content Security Policy
Strict
Mixed content
None
Third-party scripts
1

Pica: Shares a locksmith with Facebook. A very expensive locksmith.

Run the Hack Check on instagram.com

What the internet says about it

Reputation Check

A
95

In excellent shape.

Domain age
16 years
Blocklists
0 of 60
Malware reports
None
Email authentication
DMARC reject
Certificate
Valid · 41 days
Lookalike domains
Plenty

Pica: Sixteen years old and has never posted a bad angle.

Run the Tracker Check on instagram.com

Is it in a good neighborhood?

Hosting Check

A+
100

In excellent shape.

Network
Meta · AS32934
Content delivery
Meta edge
IPv6
Yes
HTTP/3
Yes
Shared-IP neighbors
Meta properties
Flagged neighbors
0

Pica: Lives in the Meta compound, in the room with the ring light.

Run the TTFB Check on instagram.com

Want a report card for your site?

Pica runs these checks on your site every day, and only writes when a grade slips. $11.11 a month for 50 sites.

Watch my website

More report cards

Browse all 100

How we grade. Four checks, weighted equally: speed timed by our own browser, a security look from the outside, public reputation signals, and the network the site lives on. A look from the outside is not a server audit.