zugspitze.de

.de crawl

First seen 2026-04-28 · Last seen 2026-05-18 · ok HTTP/1.1 200 9489 ms crawled 2026-05-05

DE · 195.242.206.197 · AS12830 InfraNet AG

Reputation 100/100

sector travel type homepage

HTML metadata

Title

Bayerische Zugspitzbahn │ zugspitze.de

Description

Tickets, FAQ and activities: All the info you need for your visit to the Zugspitze, Mount Wank or the Garmisch-Classic area. Find out more now!

Language

Canonical

https://zugspitze.de/en

Translations

Open Graph

url: https://zugspitze.de/en
title: Bayerische Zugspitzbahn │ zugspitze.de
description: Tickets, FAQ and activities: All the info you need for your visit to the Zugspitze, Mount Wank or the Garmisch-Classic area. Find out more now!

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (2)

consent.cookiebot.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

+49 8821 797 0

Registration

Updated

2026-04-09

Name servers

ns01.infra.net.
ns02.infra.net.

DNS records live

NS

ns01.infra.net
ns02.infra.net

MX

10 mx01.hornetsecurity.com
20 mx02.hornetsecurity.com
30 mx03.hornetsecurity.com
40 mx04.hornetsecurity.com

TXT

swisssign-check=VPLYqSNcz0R7QHeQ-KBJ54K35P4
v=spf1 include:spf.protection.outlook.com include:spf-de.emailsignatures365.com include:spf.ikomm.de include:spf.hornetsecurity.com ip4:195.242.206.192/29 include:_spf.skiperformance.com include:_spf.xurrent.qa -all
MS=9A3E05CB83EE137427921F50E62E56426C513DC3

Certificate (current)

R13

from 2026-04-18 to 2026-07-17

Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://zugspitze.de/en

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: same-origin
permissions-policy: geolocation=(),midi=(),sync-xhr=(self),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: frame-ancestors *
strict-transport-security: max-age=31536000; includeSubDomains, max-age=31536000; includeSubDomains