indexo.dev

axomera.com

.com crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 389 ms crawled 2026-06-02

US · 172.66.41.45 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Axomera® | Bioelektrische Schmerztherapie für die moderne Praxis
Description
Axomera® — CE-gekennzeichnetes Medizinprodukt für bioelektrische Schmerztherapie. Klinisch eingesetzt seit 2012, mit über 20.000 Behandlungen jährlich in 250+ Praxen.
Language
de
Canonical
https://axomera.com/
Translations
  • de
  • en

Open Graph

url
https://axomera.com/
title
Axomera® | Bioelektrische Schmerztherapie für die moderne Praxis
locale
de_DE
site name
Axomera®
description
Axomera® — CE-gekennzeichnetes Medizinprodukt für bioelektrische Schmerztherapie. Klinisch eingesetzt seit 2012, mit über 20.000 Behandlungen jährlich in 250+ Praxen.
locale:alternate
en_US

Technology

CDN
Cloudflare
Analytics
  • Cloudflare Insights
Social widgets
  • Vimeo Embed

Third-party hosts loaded (5)

  • cdn.prod.website-files.com×2
  • f.vimeocdn.com×1
  • i.vimeocdn.com×1
  • player.vimeo.com×1
  • static.cloudflareinsights.com×1

Contact

Phone

Registration

Registrar
Cloudflare, Inc.
Created
2018-07-31
Expires
2026-07-31 58 days left
Updated
2025-07-01
Name servers
  • sara.ns.cloudflare.com
  • seth.ns.cloudflare.com

DNS records live

NS
  • sara.ns.cloudflare.com
  • seth.ns.cloudflare.com
MX
  • 10 mx.zoho.eu
  • 20 mx2.zoho.eu
  • 50 mx3.zoho.eu
TXT
  • replit-verify=c4550e0a-b340-4286-a12c-1082213c4f13
Verified for
  • Apple
  • Google
  • Zoho

Email authentication partial

SPF
v=spf1 include:zcsend.net include:zoho.eu include:eu.zcsend.net ~all
softfail (~all)
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • mail: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCB+odBYzkC+puwrvNuT2xOmIehzS0XN3eH4GOnawtgZGHW86GeoyU630d/CHQ7oaxPR12nJddiyxjBGW2cpT…
selectors probed

Certificate (current)

WE1
from 2026-04-24 to 2026-07-23
Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://axomera.com/

present
  • strict-transport-security
  • content-security-policy
  • content-security-policy-report-only
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' https://player.vimeo.com https://assets.calendly.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.calendly.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; media-src 'self' blob: https://cdn.axomera.com https://player.vimeo.com https://*.vimeocdn.com; connect-src 'self' https://api.calendly.com https://calendly.com https://*.calendly.com https://vimeo.com https://player.vimeo.com https://*.vimeocdn.com https://api.vimeo.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytic
strict-transport-security
max-age=31536000; includeSubDomains
cross-origin-opener-policy
same-origin
cross-origin-resource-policy
cross-origin
content-security-policy-report-only
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.calendly.com https://*.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://assets.calendly.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://assets.calendly.com; connect-src 'self' https: wss:; frame-src 'self' https://calendly.com https://*.calendly.com https://player.vimeo.com https://www.youtube.com; media-src 'self' blob: https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://calendly.com

Links to (1)

Linked from (1)