The fix was much easier. The value for the settings trusted_domains in config.php was wrong. It listed all domain names for my server, incl. DNS CNAME entries, but not all of them actually served my NC instance due to virtual name hosting.
That is a bad advice security wise. This basically means that all options can be overriden by local configurations even risky options.