HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Server-Timing: intid;desc=08c499d393cf368d
Location: https://www.bahn.de
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Content-Security-Policy: default-src 'self';  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://sdk.token.logpay.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     https://*.ggpht.com     *.googleusercontent.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com     https://*.go-mpulse.net;  connect-src 'self'     https://*.googleapis.com     *.google.com     https://*.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     https://*.akstat.io     https://*.go-mpulse.net     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     *.google.com     https://cms.static-bahn.de     https://secure.pay1.de     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.salesforce-sites.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     *.googleusercontent.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     https://*.akstat.io     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
Cache-Control: public, max-age=299
Expires: Mon, 05 Jan 2026 13:05:41 GMT
Date: Mon, 05 Jan 2026 13:00:42 GMT
Connection: close

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Server-Timing: intid;desc=2c3cec086d7b04e7
Location: https://www.bahn.de
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Content-Security-Policy: default-src 'self';  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://sdk.token.logpay.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     https://*.ggpht.com     *.googleusercontent.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com     https://*.go-mpulse.net;  connect-src 'self'     https://*.googleapis.com     *.google.com     https://*.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     https://*.akstat.io     https://*.go-mpulse.net     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     *.google.com     https://cms.static-bahn.de     https://secure.pay1.de     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.salesforce-sites.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     *.googleusercontent.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     https://*.akstat.io     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
Cache-Control: public, max-age=300
Expires: Mon, 05 Jan 2026 13:05:42 GMT
Date: Mon, 05 Jan 2026 13:00:42 GMT
Connection: close

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://cms.bahn.de/
Cache-Control: max-age=0
Expires: Mon, 05 Jan 2026 13:00:45 GMT
Date: Mon, 05 Jan 2026 13:00:45 GMT
Connection: close

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Server-Timing: intid;desc=2c3cec086d7b04e7
Location: https://www.bahn.de
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Content-Security-Policy: default-src 'self';  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://sdk.token.logpay.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     https://*.ggpht.com     *.googleusercontent.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com     https://*.go-mpulse.net;  connect-src 'self'     https://*.googleapis.com     *.google.com     https://*.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     https://*.akstat.io     https://*.go-mpulse.net     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     *.google.com     https://cms.static-bahn.de     https://secure.pay1.de     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.salesforce-sites.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     *.googleusercontent.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     https://*.akstat.io     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
Cache-Control: public, max-age=300
Expires: Mon, 05 Jan 2026 13:05:42 GMT
Date: Mon, 05 Jan 2026 13:00:42 GMT
Connection: close

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://cms.bahn.de/
Cache-Control: max-age=0
Expires: Mon, 05 Jan 2026 13:00:45 GMT
Date: Mon, 05 Jan 2026 13:00:45 GMT
Connection: close

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://cms.bahn.de/
Cache-Control: max-age=0
Expires: Mon, 05 Jan 2026 13:00:44 GMT
Date: Mon, 05 Jan 2026 13:00:44 GMT
Connection: close

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Server-Timing: intid;desc=08c499d393cf368d
Location: https://www.bahn.de
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Content-Security-Policy: default-src 'self';  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://sdk.token.logpay.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     https://*.ggpht.com     *.googleusercontent.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com     https://*.go-mpulse.net;  connect-src 'self'     https://*.googleapis.com     *.google.com     https://*.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     https://*.akstat.io     https://*.go-mpulse.net     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     *.google.com     https://cms.static-bahn.de     https://secure.pay1.de     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.salesforce-sites.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     *.googleusercontent.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     https://*.akstat.io     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
Cache-Control: public, max-age=300
Expires: Mon, 05 Jan 2026 13:05:41 GMT
Date: Mon, 05 Jan 2026 13:00:41 GMT
Connection: close

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://cms.bahn.de/
Cache-Control: max-age=0
Expires: Mon, 05 Jan 2026 13:00:44 GMT
Date: Mon, 05 Jan 2026 13:00:44 GMT
Connection: close