Fix My Website
HIPAA Report

https://sensationalskin.com

Oct 12, 2026 RPT-116DCF7A View Site

* Rescans available every 24 hours

HIGH PRIORITY
3 failed · 5 warnings

* We detected the following that may create HIPAA privacy or security risks on your website.

24
Passed
3
Failed
5
Warnings
32
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
8 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 passed
SSL/TLS Certificate Pass
Valid certificate - expires in 77 days (issued by Let's Encrypt)
Security Headers
6 passed
HSTS Pass
✓ max-age=63072000
X-Content-Type-Options Pass
✓ nosniff
X-Frame-Options Pass
✓ SAMEORIGIN
Referrer-Policy Pass
✓ strict-origin-when-cross-origin
Permissions-Policy Pass
✓ camera=(), microphone=(), geolocation=()
Server Information Disclosure Pass
Server and technology headers do not expose version information.
Cookie Security
1 passed
Cookie Security Flags Pass
No cookies were set by this page - no cookie security issues.
Transport Security
3 passed
HTTP → HTTPS Redirect Pass
HTTP traffic correctly redirects to HTTPS.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Pass
No HTTP resources found loading on this HTTPS page.
Tracking & Analytics
3 warning
Fix My Website
Tracking Scripts Warning 2 found
2 third-party tracker(s) detected on this page.
Google Analytics 4 Google Tag Manager
Google Analytics 4 Warning
Third-party tracking script detected on this page.
Google Tag Manager Warning
Third-party tracking script detected on this page.
Contact Email Quality
1 passed
Contact Email Addresses Pass
All detected email addresses use the site's own domain - good professional practice.
Health Data Safety
3 passed
HTTPS Enforcement Pass
Page served over HTTPS.
Health Form Fields Pass
No forms found.
Third-Party Tracker Exposure Pass
No health-sensitive form content detected - tracker exposure risk is low.
Privacy & Legal
8 passed 2 failed
Fix My Website
Privacy Policy Pass
A privacy policy link or reference was detected on this page.
Notice of Privacy Practices Pass
A Notice of Privacy Practices (NPP) reference was detected — required under HIPAA §164.520.
Terms of Service Pass
A Terms of Service / Terms of Use / Terms & Conditions link was detected.
HIPAA Notice Pass
A HIPAA Notice or dedicated HIPAA policy page was detected.
Cookie Policy Pass
A cookie policy, notice, or consent reference was detected.
Accessibility Statement Pass
An accessibility statement, ADA compliance notice, or WCAG reference was detected.
Non-Discrimination Policy Fail
No non-discrimination policy found. Section 1557 of the ACA requires healthcare entities receiving federal funds to post a notice of non-discrimination.
State Privacy Rights Notice Fail
No state privacy rights notice found. Healthcare organizations should address state-level consumer privacy laws (CCPA/CPRA, VCDPA, Washington My Health MY Data Act, etc.) that may apply to their patients and website visitors.
Form Service Compliance Pass
No known non-HIPAA form services detected.
Chat Widget Risk Pass
No known non-HIPAA chat widgets detected.
Resource Integrity
1 warning
Fix My Website
Subresource Integrity (SRI) Warning
1 external script(s) lack SRI integrity attributes: www.googletagmanager.com. A compromised CDN could inject malicious code into your pages.
Email Authentication
1 passed 1 warning 1 failed
Fix My Website
SPF Record Pass
v=spf1 include:spf.protection.outlook.com -all
DMARC Record Fail
No DMARC record. Add TXT record at _dmarc.sensationalskin.com: v=DMARC1; p=quarantine; rua=mailto:[email protected]
DKIM Record Warning
No DKIM record found on common selectors. Your mail provider may use a custom selector.
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
8 Recommendations
1
Tracking Scripts: 2 third-party tracker(s) detected on this page.
2
Google Analytics 4: Third-party tracking script detected on this page.
3
Google Tag Manager: Third-party tracking script detected on this page.
4
Non-Discrimination Policy: No non-discrimination policy found. Section 1557 of the ACA requires healthcare entities receiving federal funds to post a notice of non-discrimination.
5
State Privacy Rights Notice: No state privacy rights notice found. Healthcare organizations should address state-level consumer privacy laws (CCPA/CPRA, VCDPA, Washington My Health MY Data Act, etc.) that may apply to their patients and website visitors.
6
Subresource Integrity (SRI): 1 external script(s) lack SRI integrity attributes: www.googletagmanager.com. A compromised CDN could inject malicious code into your pages.
7
DMARC Record: No DMARC record. Add TXT record at _dmarc.sensationalskin.com: v=DMARC1; p=quarantine; rua=mailto:[email protected]
8
DKIM Record: No DKIM record found on common selectors. Your mail provider may use a custom selector.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →