HOW.IS
?

How is booking.com?

Looks fine risk 0/100

Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 202 in 40 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How booking.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
202
40 ms
HTTPS
178 d
left on a DigiCert Inc certificate
Age
29 years
registered 1998-04-17
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A3.170.42.87
3.170.42.86
3.170.42.19
3.170.42.127
MX10 mxa-0032a201.gslb.pphosted.com
10 mxb-0032a201.gslb.pphosted.com
NSns-1959.awsdns-52.co.uk
ns-508.awsdns-63.com
ns-1288.awsdns-33.org
ns-716.awsdns-25.net
TXTworkplace-domain-verification=LsPqX88w148qQltQvOoT4ZTx6EO5Be
google-site-verification=IqETr3m1Iq2apdhg2tJndtOH5xn_C0PrLSBL4UpB9WU
paloaltonetworks-site-verification=05d52539c7f02572db198a10ba1b238b6f4c6550c083c4bf41f4eb5e5101e47c
google-site-verification=_dm8lZJlohRuCXhYRFe8COWc0JNx7c6AVF1vWpP52nE
atlassian-domain-verification=F3hugs/a4ZZHwjGTLmlb12IMA3TIRiz3ifqw4TKRz9tWk0LoyBBXfwc775aT/juy
google-site-verification=qKQzyXjxHLM4q1X-7PdrurR3p1QjjINz2QD_MBvAmyU
mandrill_verify.e-l764xQVEGJ2x07f-WGHg
cursor-domain-verification-wv67f5=cvoPd4JZECcPi6V9VqDM7DpGz
miro-verification=a08b425a7aa0b2b93256f4b504ee72afe8f9e0b9
onetrust-domain-verification=3fce180bf9e54d5b97a7c9e1ce3cb10c
_globalsign-domain-verification=FSlSaYMuHsffF-JRsSpJSonQOV0_jwrwl5kQGpFdtb
f3n3z6cw35fkl9lnb6q72dczy2z7d2gy
docker-verification=0ebe0b8e-6bd1-4f94-b0b3-344bd07052ed
VkJHqtn1JPDHrgqwzb8C30fmoABFhxVfjIOtLvlUK06CUwKgd2mevDGtnDhWZcNbxEgK39DOezbHay8XSv1zVQ==
google-site-verification=Yse39yHdmcUPiSTGNVY-eI27sV3TBfQVLBPHGWHiins
x9zcxt1dfyz6jj60w7smwl42tjzfv5yn
logmein-domain-confirmation 90DIFG9EEUT8U8R4895Y87H
atlassian-sending-domain-verification=e6842471-4159-4738-b15a-cefe813dc42a
intersight=f7b95d6ad5339839c1253d5e47c1c32ff8276909334ff7173890c54f4730e68a
cisco-ci-domain-verification=45d8573a6620606f09d1556681408112c9f9754309b02423c380eee5d287bd8f
docusign=1ddc2bf3-a249-4127-a351-f22dc75077d3
atlassian-domain-verification=PEQekniknkTLbMzMw6Ifb9G9YWzhgcGHzIne34xYo7zW9/rzVsM/6qZSUWdIVAmR
google-site-verification=1eOMDGAH7nc_P5U-8MWPqSTU40og02u0CODDvbcmoMw
fastly-domain-delegation-0344411-343733-2021_0223
adobe-idp-site-verification=040db58f-cfb9-4203-a555-bfcd15b24b86
_globalsign-domain-verification=l_BNpBAnk-rKZRyXJ9UkBfv9o6EEuuenkBrGpYNYo0
google-site-verification=WMDRc5NQqj7RWff1N8L0_Ikc08kSr-iUa3C0Zczl9QA
pexip-portal-domain-verification=d7d25e06-b2de-4a76-80c2-25f5f228b1d7
canva-site-verification=KAuoIY0y5F95ChkJB52A2w
anthropic-domain-verification-3tn1j6=kp9CbC14s2pKcVhSOOlbHwQHz
jamf-site-verification=ginKrX1WfPAXLoSWwmiYoA
slack-domain-verification=VZdvc1wWSAicshovagXu0IsScNTUVr0gj1ZcE2IM
ecostruxure-it-verification=881dfd3b-5776-4fc0-a5f6-190a0ac842f8
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
_z95nlosvuygcxtrb7snfkon25shq4zm
hpe-greenlake-domain-verification=34593547575036384f70456d357572467164437161596e387935596c35665041
sending_domain1012722=80cff31442c5f4e1b9c51346939d5bf298d9eff5f69d465476631c95f588ac90
Dynatrace-site-verification=3a88fc1a-195c-455d-ab87-88d09191496b__drhtlct978bncn9utek6qdqapk
google-site-verification=z4muhl35r1aT-msc5R269PO3RKaZHc7zzn6omxkiedI
_t33b2jwn9aya9tjjl23glp3pdv3puct
gwt5v1xngwj1f6zq7khv3bp4xnxbgmkg
_globalsign-domain-verification=9Xqu2bonefjuoUF-XmyjAptAfuE-yStJz6wy9UnH-C
globalsign-domain-verification=jpcnVg6kuHYyEz5op6ZzxI2E53gePoVqca7RgL0aNq
openai-domain-verification=dv-L58PjwMLqJ4qWsOGfKRPglPO
ZOOM_verify_rRPrFA9oTH2bxfFkJeQTzA
MS=ms94636132
wrike-verification=NDM5MTUzODoyMTFkNjJmZWM5MDk5MTVjOWY2YTQ2MWI4MmVhNjRkZjBmNjg3NzhmZTJhZTQ2NjYxMmVlNjNmMDJkZWRkN2Vi
MS=ms35392088
mongodb-site-verification=Edb8EnML5i9pqy6z4N7La044KKs2z3iC
asv=93db973d8bc6fd37d0c9e0c3feebff95
_ngvwjw7ivb5mv4iz4ynfsao26826rul
smartsheet-site-validation=zF2Qh0qhBS3O7AjSZMdaAVW2E7GB1VLL
apple-domain-verification=immERz8LzjEgeSoW
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered1998-04-17
expires2027-04-16
last changed2025-03-15
ownerREDACTED FOR PRIVACY
nameserversns-1288.awsdns-33.org
ns-1959.awsdns-52.co.uk
ns-508.awsdns-63.com
ns-716.awsdns-25.net
statusclient delete prohibited
client transfer prohibited
client update prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1998-04-17expires 2027-04-16
HTTPS certificate178 days left
validyes
issuerDigiCert Inc
covers*.booking.com, booking.com
protocolTLSv1.3
issued 2026-10-06expires 2027-04-22
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → booking.com
Email authenticationexcellent
SPFpass v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
DMARCpass policy reject
DKIMfound: s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 165/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop3.170.42.86Barracuda3.170.42.86UCEPROTECT Level 13.170.42.86SpamCop3.170.42.19Barracuda3.170.42.19UCEPROTECT Level 13.170.42.19SpamCop3.170.42.127Barracuda3.170.42.127UCEPROTECT Level 13.170.42.127SpamCop3.170.42.87Barracuda3.170.42.87UCEPROTECT Level 13.170.42.87

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=booking.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=booking.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on booking.com. Reference: /llms.txt.

Watch booking.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days