bahn.de Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Thu, 24 Sep 2026 17:15:49 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://www.bahn.de:443/

HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Server-Timing: intid;desc=17ef4471348e0313
Last-Modified: Thu, 24 Sep 2026 17:11:26 GMT
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-BAHN-DE: true
Content-Security-Policy: default-src 'self' https://applepay.cdn-apple.com;  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline'     https://applepay.cdn-apple.com     https://sdk.token.logpay.de     https://*.payone.com     https://maps.googleapis.com     blob:     https://www.jsctool.com     https://jsctool.com     https://*.optimizely.com     https://secure.pay1.de https://dbpayment.deutschebahn.com https://payment.deutschebahn.com     https://www.img-bahn.de     https://cms.static-bahn.de     https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com     https://*.bahn.de     https://*.bahn.com     https://app.crossengage.io     https://ucm-eu.verint-cdn.com;  connect-src 'self'     https://maps.googleapis.com     https://mapsresources-pa.googleapis.com     https://www.gstatic.com     data:     blob:     https://p11.techlab-cdn.com     https://www.jsctool.com     https://jsctool.com     https://assets.static-bahn.de     https://dmp.adform.net     https://siteintercept.qualtrics.com     https://logx.optimizely.com     https://*.optimizely.com     https://collect.tealiumiq.com     https://trk-api.crossengage.io     https://accounts.bahn.de     https://ucm-eu.verint-cdn.com     https://hoover-eu.verint-api.com     wss://hoover-eu.verint-api.com     https://kiana.services-bahn.de;  frame-src 'self'     https://s-bahn-hh.specials-bahn.de/     https://cms.static-bahn.de     https://secure.pay1.de https://dbpayment.deutschebahn.com https://payment.deutschebahn.com     https://dbpayment.dbv.service.deutschebahn.com     https://payment.dbv.service.deutschebahn.com     https://*.bahn.de     https://www.abo-bahn.de     https://db.novafind.eu     https://transport.novafind.eu     https://a791773171.cdn.optimizely.com/     https://s-bahn-muenchen-live.de     https://assets1-eur.mkt.dynamics.com     https://assets-eur.mkt.dynamics.com     https://accounts.bahn.de     https://db-bordgastronomie.de     https://ersatzkarte-dbregiobusnord.de     https://analytics.geops.de     https://*.sbahnm.geops.de     https://fipo.deutschebahn.com     https://regioforce.my.site.com     https://www.jugendticket-nds.de     https://a1.adform.net     https://dbstreckenagent.de     https://www.dbstreckenagent.de     https://tour.services-bahn.de;  frame-ancestors 'self';  style-src 'self'     https://ucm-eu.verint-cdn.com     https://fonts.googleapis.com     https://www.jsctool.com     https://jsctool.com     'unsafe-inline';  font-src 'self' data: https://fonts.gstatic.com;  img-src 'self'     https://*.static-bahn.de     https://maps.googleapis.com     https://mapsresources-pa.googleapis.com     https://maps.gstatic.com     https://www.awin1.com     https://partner-bahn.de     https://cm.g.doubleclick.net     https://fcmatch.google.com     https://fcmatch.youtube.com     https://dmp.adform.net     https://cdn.optimizely.com     https://*.qualtrics.com     https://assets.static-bahn.de     https://*.bahn.de     https://assets-ri.extranet.deutschebahn.com     https://cms.static-bahn.de     data:;  media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de;
X-Akamai-Transformed: 0 - 0 -
Vary: Accept-Encoding
Content-Encoding: br
Cache-Control: public, max-age=37
Expires: Thu, 24 Sep 2026 17:16:26 GMT
Date: Thu, 24 Sep 2026 17:15:49 GMT
Content-Length: 13179
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Akamai-GRN: 0.453d3117.1790270149.5dd3a0
Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload
Set-Cookie: _abck=1A42957822C3D071FFDD4A3BAD00B700~-1~YAAQRT0xFx9RNdSgAQAA05Rq1BDHk1Vxz4PfK5eBRfE3Lt9tp/xw30orfxHL/as2KtoJ18Vt0ObbTul12ezlkgUZkoN85vqa0yi36qJIxn41JclP9CD6jDtAoA2Hwtvm0/k/3tgrmrFEEq0XCrFaraQwFVIHTo0Rz2GwXIycUqLQWs1QjZUM/6YtHh01xYIHcg43nbIKWwsTYBEaH7rm5oMDfFbU7CPFxab/n6JW+5FEudf+5ejiLBxFUaudcUHhEvU3kSNPkQh3dBeFQx6n50ZZ8j/O6fAANVPzNrMT731r6dw5NdjwjgGcuWrtdt0Er2p9W5d42ClVTj4M1LVHCTgGYUNpYjx5FA1UenVUx/mePxXbjVuxhDW3ZQOYFN5HJwc5ptELA3NRcbBv9w/u0HE6Gh4Oj6PrbiWjWPXcWKF859lIFdk2WglRoKRn2zCuuC74GRk=~-1~-1~-1~-1~-1; Domain=.bahn.de; Path=/; Expires=Fri, 24 Sep 2027 17:15:49 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=F5E81570046217EA3AC833EB747ABECD~YAAQRT0xFyBRNdSgAQAA05Rq1AHqmP8NWOktkgxC3F5X93BoA1LOA5Yoom2I3Icoa8KdUqmxTkKMxBolld6kROoSNJnB3C0fY77ZY545EyKTpyauFnwxezsJp/FR/dJ3jIKp+JzhR2N7/U2n/w8RWRNii1NhOylmrC4JgVWEeuoatDl0LU7hLgTasP0UNe0Kjq31WNMwnjDO94Z8GKJa1F9ARrmNB2JkNF+cVa2ofLc1nNjBZXA0//OPLwL3CoYndvFYvZIJvJoAa30gEtEz4EVEX4FNu2ivLAF90W8YLEyyW0isBqWul5F5x9csQYo20r+7kHEhPo2I8lDO2Dki15hbPkMc1kpLStpkVd9xZyN1+jVH3cw//G6Rq/xTorpV9A==~4599863~3684403; Domain=.bahn.de; Path=/; Expires=Thu, 24 Sep 2026 21:15:49 GMT; Max-Age=14400