DMARC is set to monitor-only (p=none)
infoThe DMARC record on lians.ai uses p=none, which only reports spoofing — it doesn't stop it. Forged mail claiming to be from your domain is still delivered.
A
www.lians.ai
Grade A — 2 minor.
0critical0to fix2minor
passive scan · the deep checks need you signed in · scanned 6d ago
This is a passive website security report for www.lians.ai, graded A (96/100). We checked its SSL certificate, HTTP security headers, DNS records, email spoofing protection and publicly exposed files — the same surface a browser and a search engine already see.
We found 2 issues on this scan — each has a plain-English explanation and a copy-paste fix below.
Not your site? Get the same free report for yours →
Email spoofing protection01
DNS security01
DNSSEC is not enabled
infolians.ai is not protected by DNSSEC. DNSSEC signs your DNS records so resolvers can detect a forged answer — without it, an attacker who can poison DNS could point your domain at their own server without touching anything you control.
Get the fixes — and go deeper
Sign up to fix these — then run the checks a passive scan can't. The stuff that actually gets vibe-coded apps hacked:
- Exposed .env files (API keys & passwords)
- Public .git folders (your whole codebase)
- Leaked source maps of your original code
- Open admin panels with no login
- Debug pages left on (phpinfo, stack traces)
Fix these & go deeper
free for your first app · no card
Not www.lians.ai? Scan your own site free →