HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://microsites.bahn.de/
Cache-Control: max-age=0
Expires: Mon, 05 Jan 2026 13:00:45 GMT
Date: Mon, 05 Jan 2026 13:00:45 GMT
Connection: close
Set-Cookie: _abck=A990304DB832EB717F9DD496FC5E86ED~-1~YAAQ1B0QAp1cEDmbAQAAueY+jg989b/6WeIimuV2wctNAMN9nC2pD9iaGKpsiZm0ijs1prdAnLXYWTXGCGf46mt8Bs40fp79TSBfZafwVuURf2YBKjNSzYaB5T+NC1YNRxCQQSR9H0R5KTwO3l4BsAzf8Gtd/nh+VWD6OFQiXpZT8vA300tIOukdJNJ10+s+2piD1Q+8cQe9Llxv8vU+KewZrpiE8zOoAoMns9tQRcMOW2Yi5iU9WLVgUw/rDhqzSayb4SXkhphH530McpBubGKKbx7oYVct1KAkSWmuWOtKNwSDSY3y1wGZ9wc7P/CmR83uUXBvH/rBmA+xpANCII2a7QsoI/kgd1BPa42j0JScibcVP6YgpSOYNB/hmgHkN3U=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Tue, 05 Jan 2027 13:00:45 GMT; Max-Age=31536000
Set-Cookie: bm_sz=B9B2932089E67C379002F886FFB7A68A~YAAQ1B0QAp5cEDmbAQAAueY+jh5tApLAFDq/r7nc2KfYYM/5WjrmplUvJih4dUpnOrgj2bAhMCDVOOoDa4aBnDpu/VWje/ih2X7UvqjZnB6fh/4HgwouAV9zIElc7Yn2xUwRPedN+IJh+sZQ9PF5ZF53ERid6omTFVVEvRfCiL6WFBPzkQ9e1+TpvD1jvDensUkY8eOwFzwNbntmyhmg8Z2Io2uxLjkcmMbHiZLnvb0TjjK2nequa3m6gl3VZ78g12FXqXzDHj4bd4fjBFI51QxEF5Y6grwIYoSmiBBnux2/76WaT5k0dsUtpZbuuXJRhuTgvE3MzQs4hatT/jxAOTLgRhtS/wFyfZ3F~3290434~3424565; Domain=.bahn.de; Path=/; Expires=Mon, 05 Jan 2026 17:00:45 GMT; Max-Age=14400

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://microsites.bahn.de/
Cache-Control: max-age=0
Expires: Mon, 05 Jan 2026 13:00:45 GMT
Date: Mon, 05 Jan 2026 13:00:45 GMT
Connection: close
Set-Cookie: _abck=FB1AEE8E90C47AF67B573101C8E1DA62~-1~YAAQBKAkFzK2CzCbAQAAAuc+jg9TrdFwqVKFYA3sfh4SpmHOR+JnxoaQeyUyz7Y94kd+xFvCbQ8N2BlIrTTDUW69t2ZGAqUsg95zzQbLH3XboOIl/2ACOiAAuszSEujny42lyMERUCXPocn156ZThmozk20As8qZwNn2TOVAof033odUWB+G1NnbuYFgnKzKGqcE4Pp2ifgUJP0AIpNIZ/0A7l10Dq0Ay2oVJB2zm2lIGrvUZiPmdobcWqbQ5OPmQ5RDk2WbxHoT6hKwl6cb7EKo+MuzmYFAFFk84kqq2TTJDAozGet3AFweN6JtkUUI+x4i1lRmXIE7PPr1nWEZqmQc6H9mecJdUoWSVA/65dgnZQ8i9puHHpf7gGg5/W4FaYU=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Tue, 05 Jan 2027 13:00:45 GMT; Max-Age=31536000
Set-Cookie: bm_sz=853F9C9C17706E04D6338C77821D2F8E~YAAQBKAkFzO2CzCbAQAAAuc+jh6dX9ZgCy6FPL/nV1OEFOXHhRYd7dlgQ7fnl01fw8AG2hd2ORcF8nnDSu8xk4dWMqxrrTRes6lee8i95BXvpvruTNXEFFtzAeWOTto/wjVruciF/Yl1HRjn+j2vty5xjbFw6A8fTD2b9iIpHxIuSZ5Yl0UmUOPVHqezGvpf2bTTaJ6oj53DdxhYaJ3rhNNfLnf3d1oI8vOGw4YrmzYSqawrcE+M0JbcVcvRwghqf9cnSgJiyw3eXm5+L6j0cX5+qUhgZ2oh+aWxdhtrNjsY2/MZk2tQXwbA7cLX5qYQZabB4Gb0oYUtv2615Dn6a+a1g+nmj9T4F+IyFt3m3Ynw2Admxms=~3290434~3424565; Domain=.bahn.de; Path=/; Expires=Mon, 05 Jan 2026 17:00:45 GMT; Max-Age=14400

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html;charset=UTF-8
Server-Timing: intid;desc=0a410a403fe61abd
Location: https://www.bahn.de
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Content-Security-Policy: default-src 'self';  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://sdk.token.logpay.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     https://*.ggpht.com     *.googleusercontent.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com     https://*.go-mpulse.net;  connect-src 'self'     https://*.googleapis.com     *.google.com     https://*.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     https://*.akstat.io     https://*.go-mpulse.net     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     *.google.com     https://cms.static-bahn.de     https://secure.pay1.de     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.salesforce-sites.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     *.googleusercontent.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     https://*.akstat.io     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
X-Akamai-Transformed: 0 - 0 -
Cache-Control: public, max-age=300
Expires: Mon, 05 Jan 2026 13:05:42 GMT
Date: Mon, 05 Jan 2026 13:00:42 GMT
Connection: close
Set-Cookie: _abck=FB7D79E5297BDA2F7681B0D114E8AA06~-1~YAAQBKAkF7u0CzCbAQAAAdk+jg+r0EQyQyvzI1pZdxNmQUkNur7IENh+TixcHVDIKFRPR/ktTD9qCTKg3i6skYu+9BUatEorknN0DspAXqA7gkEkhnin/iWR27+BypXjsbOiislHTLy90xSB4mp7Ec8JwEL0cYaPxNMyh6rYIVsWw2KuicBHQIrzGyMeYoevuoesZZzJGvuxEc8haT4HhamtUxK95C9aXlvs3WFUoOQpy3YJLQtsRS7/FxVu8tUNiQz24ctZEEAeIS9acDCWFDBE+MvlN0tQuJIPTby2/x0XRtOehwW3zfFoBwwGmLvcH0dnJzMx8UwTDLAqgclCzxaC0NDnBKm+1RZV81LcHyblv6EPBzLa4p4GSBEBVOQR1lgFgQj+cpxyiH4Yu0Pv2OypYcAmlm1v1iBThX8n2/VrIFIbw3pBi8EXdyuXdctr8ig=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Tue, 05 Jan 2027 13:00:42 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=103EDEB1CC1030CFE8B58BE4D7BD9920~YAAQBKAkF7y0CzCbAQAAAdk+jh6Z6UD9E4WVSh6mTB89MW3tMUfbWJ021EMKU8aKa5DeqtYf3VYENloPot41+xW22VP7fdmPBP2Q/jIHyMDj/vMCmf+jlkMVr0OO+/Gct/Tbom6EteWwX7GVZNxN4/NxbC91Q4nzxhBVxCej3+YNQmUYzAa93h3JWVPDFeju2PlK0MeElRrCue5Z53ZHgomWlwnlIo9t6dsQYM+AnTmrM2n6fuJpz37myh+fdMZWNXjY9FHIsGK4oCnV9hk1w5Ge0XLzavCcP7uP87p8BTYk6y3io2Kxe1hbyD9oLxczIHgIDk5BTqeG1tYcX2AsIyt/kiXQw1zy4KxIAdHG22MdwT8HAT0=~3422265~3618100; Domain=.bahn.de; Path=/; Expires=Mon, 05 Jan 2026 17:00:42 GMT; Max-Age=14400

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Server-Timing: intid;desc=b0774e8f94cf372d
Location: https://www.bahn.de
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Content-Security-Policy: default-src 'self';  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://sdk.token.logpay.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     https://*.ggpht.com     *.googleusercontent.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com     https://*.go-mpulse.net;  connect-src 'self'     https://*.googleapis.com     *.google.com     https://*.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     https://*.akstat.io     https://*.go-mpulse.net     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     *.google.com     https://cms.static-bahn.de     https://secure.pay1.de     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.salesforce-sites.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     *.googleusercontent.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     https://*.akstat.io     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
Cache-Control: public, max-age=299
Expires: Mon, 05 Jan 2026 13:05:41 GMT
Date: Mon, 05 Jan 2026 13:00:42 GMT
Connection: close
Set-Cookie: _abck=5785377E5A066F1E5E54A12033BC2677~-1~YAAQ0x0QAhgH2jubAQAAPto+jg/gO2Cl+EJbJ79BIm3i2AHIBipl5kU83qsbGj5vppUa2/TGjk44n67OOJNZ5WcjdW2E8oTwXizG16I0ydGCQs2hMPrfHY7LnQ/T6qDS2jvW5VuYdcJjzfFh9Taih+21MFOXKacLDdt5h1EYXaJ1mxQovpfkqvYZJ4FKu4djnuEWsrza1qTSbdZw2LWfxovryqK+CxsFmDCDXWMzV2TDZtx/X6ckIwJTzz+4h230cFEiYAuQ3HxLtGyFnBkBW60k/DTBg56vUHtUBnG2jtAvC8ExXmswgG7UHS98jWgY5FbZHT5ba+qht4cvhzao2WekTsdU9IISqZMBdaDHPe/AEQ6jteWgAfJaF/7xxRt6B09r2nIzkC26GzqRWKtuhW6vDRr5N18KFYlKu2YF6L3sIRlNbKu0CxRl/soP78eVFm4=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Tue, 05 Jan 2027 13:00:42 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=903E5DA08158167859C010A80D13A8CE~YAAQ0x0QAhkH2jubAQAAPto+jh6pEswBNZ6BQ/r5KfozHztkqUiUMHdG0AadAQwp5NVWdkF8HFk6BXbq7zMHnFjhTcv08CMkw6p4QVrF4hca9g7yLNyDtXDjuMsB0LOZZBLQ9UjBX0uVgtcvyBqsFHmVMttYwcv4p2ABN0Qa5E3Ykp2eFNnDoHaA1aKBKfMgnyUXfoCl82VKuMz0++T8Rx4Kg8zBWRF8IpjQKRBtNtC2xn2oYyr0LMIR2YLQ/0n/ZbyKZ6JJoNvaSVbyYG72SnhO7CXRD8Fryzjs4GSm6SSYXN28TxAdmyKzjn/s2DEHn67LgNNP9hnXTg60fve6FV4218Qm8P7V2mpJcA==~3422265~3618100; Domain=.bahn.de; Path=/; Expires=Mon, 05 Jan 2026 17:00:42 GMT; Max-Age=14400

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Server-Timing: intid;desc=a0789ace94e70eb1
Location: https://www.bahn.de
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Content-Security-Policy: default-src 'self';  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://sdk.token.logpay.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     https://*.ggpht.com     *.googleusercontent.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com     https://*.go-mpulse.net;  connect-src 'self'     https://*.googleapis.com     *.google.com     https://*.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     https://*.akstat.io     https://*.go-mpulse.net     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     *.google.com     https://cms.static-bahn.de     https://secure.pay1.de     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.salesforce-sites.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     *.googleusercontent.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     https://*.akstat.io     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
Cache-Control: max-age=600
Expires: Mon, 05 Jan 2026 13:10:42 GMT
Date: Mon, 05 Jan 2026 13:00:42 GMT
Connection: close
Set-Cookie: TS01913004=0121ca1b951a971aafb8738ffb72c2508dd816de78617a989161f90c877da2c0626be02ef5d8a8cc77f32220490ad0bca51c31b396; Path=/; Domain=.public.cms.noncd.db.de; Secure; HttpOnly
Set-Cookie: _abck=394BDF87C3397978A7A9251BAB0557DB~-1~YAAQ1B0QAhpYEDmbAQAAxNg+jg8/lG9qTG2Epz32j4AiPJAqUOC+xau8YyOuxQQyRSNi1pUeoAypaSEHHIhTyAEtgl3NTl8wumQLlHi8DgPG3nZipWlE/DiZ0F056m5B6Rq2EKYeOvhLYn+EnlRsXc0ThFzbJsPcx52gyQjkEpOcHS7sAhOTrxtWByw3siyyk9tsfPqFhqQ8t0Dt3o6+eGv5PEQypXAjJFGBlBAthRb2sX+Su79rUsmSd5TE4mftSC7d5nvDxjaZrGfgyGETcqqemz19NeBOf0ZhBhlRwc94jTQWtA/b0W46L5Lf9JMvn/oBDP9Zk4rRjK2VySyxcH4jgBLPHvOGtkjffMSJMstIic0veMdpeE4e68lBW8WxzwvmvAm2BcxgSbJXzT5YlO/T7SkQDJNtcKnX+YytAcnicZgM4s0BSfK7oEPg+bMVxIk=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Tue, 05 Jan 2027 13:00:42 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=62F113AE93F0E395280E9AAAF0BED438~YAAQ1B0QAhtYEDmbAQAAxNg+jh7PLI1uzpBtbQnMAjy3KpRCcaVrUo8WLiLMVtrKd417JOqu2Hw/3q0Y1si925zd0w02ubq/sMX7cBA2sQDyKlbo2RMwIG8MsJrd8qTuezzRdeG7/QCpAXyIJs3Z4rqZm56y/iPOqY0LQEDYeeZ96Ld09WlDNrnx3SvVPZIB1pbubS0738HMOp1roSTMW9FKnTukSydGKJ818djrfqRdUBINolfLY/0l7F7gSybS4/5tBLGyzuksRnWu9Vs7F3vj4zh0hRlsFQoFsjmxsOxMUwJYCVy3hGqhW1/XPpWWnAcq2u6ju2ub8GxreNPre2x+w8J9FoCnFoxL~3422265~3618100; Domain=.bahn.de; Path=/; Expires=Mon, 05 Jan 2026 17:00:42 GMT; Max-Age=14400

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html;charset=UTF-8
Server-Timing: intid;desc=0a410a403fe61abd
Location: https://www.bahn.de
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Content-Security-Policy: default-src 'self';  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://sdk.token.logpay.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     https://*.ggpht.com     *.googleusercontent.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com     https://*.go-mpulse.net;  connect-src 'self'     https://*.googleapis.com     *.google.com     https://*.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     https://*.akstat.io     https://*.go-mpulse.net     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     *.google.com     https://cms.static-bahn.de     https://secure.pay1.de     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.salesforce-sites.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://*.googleapis.com     https://*.gstatic.com     *.google.com     *.googleusercontent.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     https://*.akstat.io     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
X-Akamai-Transformed: 0 - 0 -
Cache-Control: public, max-age=300
Expires: Mon, 05 Jan 2026 13:05:41 GMT
Date: Mon, 05 Jan 2026 13:00:41 GMT
Connection: close
Set-Cookie: _abck=333C7DB231AD9898C1EDF3423BA1E64D~-1~YAAQCqAkF1S7ui6bAQAAJNg+jg+SNoNn00caIFgzJXPzyuckvemX3ZKKsIMRuOuV9N5pRSBsYdAfXZDzfu6t53O0j9occZJSo/CKNgBcltGzJycz5gl+8/NMxzvv7/w9UNrX3QKzfvr7oq98pZl54kiwCSLAK+YhKrFBn4EEC86/Y7xvQauM3bXWwvNNLKf0aeLR24tZL6KiBW7UgrEgiO/CoNSMGLpnh3cZU4dXL8YTXAzT56A1jbDaQHgQNz+KPJnDncqGLJqK7bKmx8DMJ0n2ZzpWyi67hV+HGL+4RBiTZqisCD/A+dZE58Zfqhk+jilO/3bnXGvY+PNSOY+v9tBknC9O4aU6E+9uJZw3lvwRNmBL/xlzX0LCVDmrb2H7iPIY2yhhDYVv6gbWfTTi6OfnTRUIHK8M42gmWGV5P1xYpynDVBMSYbaXbeUYJAwkh34=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Tue, 05 Jan 2027 13:00:41 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=C0E6308174CE6F2BF17441D69CDA45D0~YAAQCqAkF1W7ui6bAQAAJNg+jh7NdVl686NH4sqYDDLNORafA9TA4eaSCrBtg+PbDdSx9/OUhDx9RoLiDhr48O01PKKqnZPxS2ZcCX82MZdLeMkO5DEVPY4B58PieYFFIzVs+7g62SCgE8VWCH9p0WpqPz0hPKFFrU+ncEaFUq2BsluSeUozWsuLb5K4bPFYAntz9uCyFcwVb2hv70nck9EKGJd8PwO/NLJuw7ZDJloHWdjd3+FJSC23ChlfUAlYJyPP038MhJbN296XAHvW/5POIihoXJ60bPzK42ejJONfC+FroUIouuTwdaPDPzUS3sFLo6dBIYOCSvS1VeyKV3iwpGSfNNozlVdDaFnIkt2TEk8u~4407622~3159351; Domain=.bahn.de; Path=/; Expires=Mon, 05 Jan 2026 17:00:41 GMT; Max-Age=14400

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://microsites.bahn.de/
Cache-Control: max-age=0
Expires: Mon, 05 Jan 2026 13:00:44 GMT
Date: Mon, 05 Jan 2026 13:00:44 GMT
Connection: close
Set-Cookie: _abck=AA4B14099D580B245AF2361891F9C26D~-1~YAAQCqAkF7W8ui6bAQAA0eM+jg+XnhAdWPEFeQy6URZc/PPbM13r/aa9jzbeeFMoyCE67LXVaQvlmgVJG+xHvjVBILJd5zkNUSucxntsi5ZySb+Ukasy5fBDZsS8XUx431DQBbqfFzBx1Qk0JNb2pCzXd7lCCjD+MFBwo8v+XQeKJ62679ONPddpEae2jcCHTsls5VG0C712BFBYiJeyCWqotnV6BOIpDK+AseZikmONhLqhuI5EJKwouQaKYdhctb9bIf2Xgw+is0+eU5totDxe9CbKOc+DU+Y4gmaSt8vYhld4i6nA4tg48UJ7CD3bz9IwPgHV3ZfkrAJoMbXoTeLO4MYcP6hhWAEoGOmjnXTLdfrpfkrieoEec+GBzso+TWE=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Tue, 05 Jan 2027 13:00:44 GMT; Max-Age=31536000
Set-Cookie: bm_sz=DDB817FD0E7461A862B02D469FFC3B61~YAAQCqAkF7a8ui6bAQAA0eM+jh4H1nPi4fmQihyyslE3+r5jORnINcyjWRFp/uzFskP6mExw8ct58vPbgmoI6ZAxJ3CQyTj/K4LdDz9wxTp9FGL4iJgpx4F9IezgETVSQV3F2gFsrlXL5qEW4/UD4GmjuvEq4RRm5D0KTjljteasOQBU0xGi7cnLopXmhxhz9O6RytxubPOjOjSeW8iaDtZR6wxsIk55Bmd4h6NExHGpk8yBVbFtMGTyz9iltBiI+CcvJJ5eIWpCqXi9LpkaeBE/ijIWrjCbDviHBzlnFVywWlTFIbdghTh/TgpQK+Nj3474Dlfwpfr3XGabS5IJhdnidlgWeQK0JCBXnuZDSwsiSvNENaQ=~3491380~3225909; Domain=.bahn.de; Path=/; Expires=Mon, 05 Jan 2026 17:00:44 GMT; Max-Age=14400

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://microsites.bahn.de/
Cache-Control: max-age=0
Expires: Mon, 05 Jan 2026 13:00:44 GMT
Date: Mon, 05 Jan 2026 13:00:44 GMT
Connection: close
Set-Cookie: _abck=C321893E40DBD5246FD72532124D0B76~-1~YAAQ0x0QAhMM2jubAQAA9+M+jg8pghSItDsX8IZEKIOfWbRCUT5BRogHCELKBxY+0qJiz3rn23yndIu7hh9fCuSDFBu8RRgKVPXxIojC00yVetFvvvrdYYY6nV/GpV0/UHHF9yOJmT3np87VQkmcAlurtI0Cp1YrHxoRorMI92PEQ0pwIXxaOy2067y0pjO9zmLzPDRK9t6XB98WNubVIcCyWEacMYqUqMldOGPQcPJ/EIDe+CWl5/Y3YJMh4wPypTHJwnS2dJrmFakudTYwjPngvPZGvyL24QXcQkV3nIs1nzGNhuo9NKRagMqrbHxjQkmqcVJWyovdRSkV2lca9iu4M9S+hbb+0EipdiZeFm4LBC0ZBH84i6ij17jWLYTxvw0=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Tue, 05 Jan 2027 13:00:44 GMT; Max-Age=31536000
Set-Cookie: bm_sz=BEC468C4C61A012B8CFA247CD4EBD830~YAAQ0x0QAhQM2jubAQAA9+M+jh7uHMoD4qT8gxFMEWP8KEOWirltNy66oRBuiD+2qi/PLJPAkyMJjx755qM+CSFbCYkWfq5ecTAuEpEoxXIuVWm8fS0z2XWMcjF6uw6wtNiHFDQjTCpkH7HEepNg2bHicmj1pqG+xVhHOSCHsqApdM6jApsO/sCng7zmQp9Le/LsLJ/MWwGH4Dmk5eCRe+OYVMShYirZl/ruT6C3QcVX4OLUNp2i+KpQETmh5IYFgi3yu3G96zR0e8QYY0Zv9wy9Ia9K680Zh/4kmVUeAladDLUqA5VmT9DN219RdGRcGZmMmnToWYyOiTgYcuvJ+bccUHLUCjRvGwPR5g==~3491380~3225909; Domain=.bahn.de; Path=/; Expires=Mon, 05 Jan 2026 17:00:44 GMT; Max-Age=14400