Fix My Website
HIPAA Report

https://nirvanaweightloss.com

Oct 9, 2026 RPT-C3BB0080 View Site

* Rescans available every 24 hours

HIGH PRIORITY
23 failed · 1 warning

* We detected the following that may create HIPAA privacy or security risks on your website.

6
Passed
23
Failed
1
Warnings
30
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
24 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 passed
SSL/TLS Certificate Pass
Valid certificate - expires in 47 days (issued by Google Trust Services)
Cloudflare Bot Protection Detected
Page Blocked by Cloudflare
Cloudflare JS challenge returned - a real browser is required. SSL/TLS and email auth checks still run. Page content checks skipped.
Security Headers
1 passed 5 failed
Fix My Website
HSTS Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Content-Type-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Frame-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Referrer-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Permissions-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Server Information Disclosure Pass
Server and technology headers do not expose version information.
Cookie Security
1 passed
Cookie Security Flags Pass
All 1 cookie(s) include Secure, HttpOnly, and SameSite attributes.
Transport Security
2 passed 1 failed
Fix My Website
HTTP → HTTPS Redirect Pass
HTTP traffic correctly redirects to HTTPS.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Fail
Failed — Cloudflare blocked access; mixed content could not be verified.
Tracking & Analytics
1 failed
Fix My Website
Tracking Scripts Fail
Failed — Cloudflare blocked access; tracking scripts could not be verified.
Contact Email Quality
1 failed
Fix My Website
Contact Email Addresses Fail
Failed — Cloudflare blocked access; email addresses could not be verified.
Health Data Safety
3 failed
Fix My Website
HTTPS Enforcement Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Health Form Fields Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Third-Party Tracker Exposure Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Privacy & Legal
10 failed
Fix My Website
Privacy Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Notice of Privacy Practices Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Terms of Service Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
HIPAA Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Cookie Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Accessibility Statement Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Non-Discrimination Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
State Privacy Rights Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Form Service Compliance Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Chat Widget Risk Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Resource Integrity
1 failed
Fix My Website
Subresource Integrity (SRI) Fail
Failed — Cloudflare blocked access; SRI could not be verified.
Email Authentication
1 passed 1 warning 1 failed
Fix My Website
SPF Record Fail
No SPF record found. Add TXT record: v=spf1 include:_spf.google.com ~all
DMARC Record Pass
v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:[email protected];
DKIM Record Warning
No DKIM record found on common selectors. Your mail provider may use a custom selector.
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
24 Recommendations
1
HSTS: Skipped — Cloudflare blocked access; headers could not be verified.
2
X-Content-Type-Options: Skipped — Cloudflare blocked access; headers could not be verified.
3
X-Frame-Options: Skipped — Cloudflare blocked access; headers could not be verified.
4
Referrer-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
5
Permissions-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
6
Mixed Content: Failed — Cloudflare blocked access; mixed content could not be verified.
7
Tracking Scripts: Failed — Cloudflare blocked access; tracking scripts could not be verified.
8
Contact Email Addresses: Failed — Cloudflare blocked access; email addresses could not be verified.
9
HTTPS Enforcement: Failed — Cloudflare blocked access; health data safety could not be verified.
10
Health Form Fields: Failed — Cloudflare blocked access; health data safety could not be verified.
11
Third-Party Tracker Exposure: Failed — Cloudflare blocked access; health data safety could not be verified.
12
Privacy Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
13
Notice of Privacy Practices: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
14
Terms of Service: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
15
HIPAA Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
16
Cookie Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
17
Accessibility Statement: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
18
Non-Discrimination Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
19
State Privacy Rights Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
20
Form Service Compliance: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
21
Chat Widget Risk: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
22
Subresource Integrity (SRI): Failed — Cloudflare blocked access; SRI could not be verified.
23
SPF Record: No SPF record found. Add TXT record: v=spf1 include:_spf.google.com ~all
24
DKIM Record: No DKIM record found on common selectors. Your mail provider may use a custom selector.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →