booking.com source code

The homepage of booking.com is 8.2 KB of HTML built with Cloudflare, Amazon CloudFront. Its security headers get a D. We last checked it on 2026-10-27.

See the full source

Address	https://www.booking.com/
Status	202 after 1 redirect
Language	en
Built with	Cloudflare, Amazon CloudFront
Scripts	1 external, 4 inline
Stylesheets	0
Security headers	D · see the headers

The first lines of its HTML

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>
    </title>
    <style>
      body {
      font-family: "Arial";
      }
    </style>
    <script type="text/javascript" nonce="17931228705500.8575860990401185">
      function getAjaxObject() {
      var ajax;
      if (window.XMLHttpRequest) {
      try {
      ajax = new window.XMLHttpRequest(); // XMLHttpRequest (Mozilla, Opera, Safari, etc.)
      } catch (e) {
      return false;
      }
      } else {
      var msXML = new Array( // XMLHttpRequest (IE with ActiveX)
      "Msxml2.XMLHTTP.5.0",
      "Msxml2.XMLHTTP.4.0",
      "Msxml2.XMLHTTP.3.0",
      "Msxml2.XMLHTTP",
      "Microsoft.XMLHTTP"
      );
      for (var i = 0; i < msXML.length; i++) {

All the code · Meta tags and report · Response headers · What changed