Fix My Website
HIPAA Report

https://zoskincentre.com

Oct 9, 2026 RPT-31E57BFA View Site

* Rescans available every 24 hours

HIGH PRIORITY
22 failed · 0 warnings

* We detected the following that may create HIPAA privacy or security risks on your website.

8
Passed
22
Failed
0
Warnings
30
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
22 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 passed
SSL/TLS Certificate Pass
Valid certificate - expires in 51 days (issued by Google Trust Services)
Cloudflare Bot Protection Detected
Page Blocked by Cloudflare
Access denied (HTTP 403) - IP or bot score blocked by Cloudflare WAF. SSL/TLS and email auth checks still run. Page content checks skipped.
Security Headers
1 passed 5 failed
Fix My Website
HSTS Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Content-Type-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Frame-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Referrer-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Permissions-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Server Information Disclosure Pass
Server and technology headers do not expose version information.
Cookie Security
1 passed
Cookie Security Flags Pass
No cookies were set by this page - no cookie security issues.
Transport Security
2 passed 1 failed
Fix My Website
HTTP → HTTPS Redirect Pass
HTTP traffic correctly redirects to HTTPS.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Fail
Failed — Cloudflare blocked access; mixed content could not be verified.
Tracking & Analytics
1 failed
Fix My Website
Tracking Scripts Fail
Failed — Cloudflare blocked access; tracking scripts could not be verified.
Contact Email Quality
1 failed
Fix My Website
Contact Email Addresses Fail
Failed — Cloudflare blocked access; email addresses could not be verified.
Health Data Safety
3 failed
Fix My Website
HTTPS Enforcement Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Health Form Fields Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Third-Party Tracker Exposure Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Privacy & Legal
10 failed
Fix My Website
Privacy Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Notice of Privacy Practices Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Terms of Service Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
HIPAA Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Cookie Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Accessibility Statement Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Non-Discrimination Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
State Privacy Rights Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Form Service Compliance Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Chat Widget Risk Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Resource Integrity
1 failed
Fix My Website
Subresource Integrity (SRI) Fail
Failed — Cloudflare blocked access; SRI could not be verified.
Email Authentication
3 passed
SPF Record Pass
v=spf1 include:spf.protection.outlook.com include:_spf.elasticemail.com ~all
DMARC Record Pass
v=DMARC1; p=quarantine; rua=mailto:[email protected]; mailto:[email protected]
DKIM Record Pass
Found on selector 'selector1': v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJKmrKTIIJ0Dm4ujbY…
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
22 Recommendations
1
HSTS: Skipped — Cloudflare blocked access; headers could not be verified.
2
X-Content-Type-Options: Skipped — Cloudflare blocked access; headers could not be verified.
3
X-Frame-Options: Skipped — Cloudflare blocked access; headers could not be verified.
4
Referrer-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
5
Permissions-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
6
Mixed Content: Failed — Cloudflare blocked access; mixed content could not be verified.
7
Tracking Scripts: Failed — Cloudflare blocked access; tracking scripts could not be verified.
8
Contact Email Addresses: Failed — Cloudflare blocked access; email addresses could not be verified.
9
HTTPS Enforcement: Failed — Cloudflare blocked access; health data safety could not be verified.
10
Health Form Fields: Failed — Cloudflare blocked access; health data safety could not be verified.
11
Third-Party Tracker Exposure: Failed — Cloudflare blocked access; health data safety could not be verified.
12
Privacy Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
13
Notice of Privacy Practices: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
14
Terms of Service: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
15
HIPAA Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
16
Cookie Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
17
Accessibility Statement: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
18
Non-Discrimination Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
19
State Privacy Rights Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
20
Form Service Compliance: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
21
Chat Widget Risk: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
22
Subresource Integrity (SRI): Failed — Cloudflare blocked access; SRI could not be verified.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →