1
HSTS:
Failed — page could not be fetched; security headers unverifiable.
2
X-Content-Type-Options:
Failed — page could not be fetched; security headers unverifiable.
3
X-Frame-Options:
Failed — page could not be fetched; security headers unverifiable.
4
Referrer-Policy:
Failed — page could not be fetched; security headers unverifiable.
5
Permissions-Policy:
Failed — page could not be fetched; security headers unverifiable.
6
Server Information Disclosure:
Server headers expose version/technology: undisclosed, ASP.NET. Remove or redact to avoid leaking infrastructure details.
7
HTTP → HTTPS Redirect:
HTTP requests are not redirected to HTTPS. Visitors on http:// receive an unencrypted connection.
8
Mixed Content:
Failed — page could not be fetched; mixed content unverifiable.
9
Tracking Scripts:
Failed — page could not be fetched; tracking scripts unverifiable.
10
Contact Email Addresses:
Failed — page could not be fetched; email addresses unverifiable.
11
HTTPS Enforcement:
Failed — page could not be fetched; health data safety unverifiable.
12
Health Form Fields:
Failed — page could not be fetched; health data safety unverifiable.
13
Third-Party Tracker Exposure:
Failed — page could not be fetched; health data safety unverifiable.
14
Privacy Policy:
Failed — page could not be fetched; privacy & legal checks unverifiable.
15
Notice of Privacy Practices:
Failed — page could not be fetched; privacy & legal checks unverifiable.
16
Terms of Service:
Failed — page could not be fetched; privacy & legal checks unverifiable.
17
HIPAA Notice:
Failed — page could not be fetched; privacy & legal checks unverifiable.
18
Cookie Policy:
Failed — page could not be fetched; privacy & legal checks unverifiable.
19
Accessibility Statement:
Failed — page could not be fetched; privacy & legal checks unverifiable.
20
Non-Discrimination Policy:
Failed — page could not be fetched; privacy & legal checks unverifiable.
21
State Privacy Rights Notice:
Failed — page could not be fetched; privacy & legal checks unverifiable.
22
Form Service Compliance:
Failed — page could not be fetched; privacy & legal checks unverifiable.
23
Chat Widget Risk:
Failed — page could not be fetched; privacy & legal checks unverifiable.
24
Subresource Integrity (SRI):
Failed — page could not be fetched; SRI unverifiable.
25
DMARC Record:
DMARC found but policy is 'none' - no enforcement, email spoofing is not blocked. Upgrade to p=quarantine or p=reject. Record: v=DMARC1; p=none; rua=mailto:
[email protected]