HTTP/1.1 200 OK Date: Tue, 21 Jul 2026 02:38:11 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, accept, client-security-token, X-CSRF-Token Last-Modified: Fri, 05 Jun 2026 11:18:51 GMT ETag: "39fafda4c6ff8d09f25c1c6e8b7656a5ef458c72" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Encoding: none Content-Length: 50545 Connection: Close X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'self' https://www.intranet.ufz.de ; Access-Control-Allow-Origin: https://finder.ufz.de Content-Type: text/html; charset=UTF-8