Is naunet.eu safe to use as a vendor?

naunet.eu scored 70/100 on LynxRadar's security posture assessment. The domain partially meets security requirements with some gaps to address. 6 checks passed, 6 warnings, 2 critical issues across 14 passive checks including TLS, DMARC, security headers, breaches, and CVEs.

Does naunet.eu have SPF configured?

Yes. SPF record: v=spf1 include:spf.protection.outlook.com -all

Does naunet.eu have security headers configured?

naunet.eu has 0 of 5 recommended security headers. Missing: CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy.

naunet.eu Security Report — Grade C- (70/100)

Q: What TLS version does naunet.eu use?

naunet.eu uses TLSv1.3 with TLS_AES_256_GCM_SHA384. TLSv1.3 negotiated with TLS_AES_256_GCM_SHA384 (256-bit). Strong configuration with no deprecated protocols or weak ciphers detected.

Q: Does naunet.eu have DMARC configured?

Yes. naunet.eu's DMARC policy is set to 'none'. SPF record: yes. Strengths: DMARC pct=100 — policy applies to all mail; SPF hard-fail (-all) configured; SPF DNS lookup count: 1/10 (within limit); DKIM configured (selectors: s1, s2). Issues: DMARC policy is 'none' (monitoring only, no enforcement); DMARC has no aggregate report URI (rua) — policy violations won't be reported.

Q: Does naunet.eu use HSTS?

No. Strict-Transport-Security header is missing. Connections can be downgraded to HTTP via man-in-the-middle attacks. If this domain is in the browser HSTS preload list, browsers may still enforce HTTPS — but the header should be present for full coverage.

Q: Is naunet.eu's SSL certificate valid?

Yes. Strengths: Certificate valid, 88 days remaining; Issued by Let's Encrypt.

Q: Does naunet.eu have DNSSEC enabled?

No. Strengths: 2 nameservers configured (ns27.domaincontrol.com, ns28.domaincontrol.com); SOA record present and MNAME consistent with NS set; 1 MX record(s) present; Zone transfers properly restricted on all nameservers; Address records present: 1 A record(s). Issues: All nameservers are from a single provider (domaincontrol.com) — a provider outage takes down the domain; DNSSEC not configured — DNS responses can be spoofed or tampered with in transit (DNS cache poisoning).

C-

70/100

naunet.eu

June 09, 2026 ·

1+ Warnings 6 Passed

AI Summary

naunet.eu scored 70/100, meeting baseline requirements but with 6 findings that require attention. The vendor can proceed with a remediation timeline agreement.

Critical gaps in: HSTS Header, Security Headers. Positive signals: TLS Configuration, Known Breaches, Cookie Security all passed.

4 action items identified, including 0 critical. The issues are configuration gaps, not architectural problems. A focused remediation effort of 2–5 days could address all findings.

Better than 42% of 2675 companies scanned.

042th pct100

A+

A-

B+

B-

C+

C-

D+

D-

HSTS Header

Security Headers

MX Records & Mail Provider

MTA-STS & TLS Reporting

DNS CAA Records

DNS Configuration

DMARC / Email Security

security.txt (RFC 9116)

TLS Configuration

Known Breaches

Cookie Security

TLS Protocol Support

CVE Exposure

Certificate Hygiene

C-

naunet.eu

70/100

No critical issues — great work!

Strengthen email authentication configuration

DMARC / Email Security

2–4 hours High

Email authentication is partially configured for naunet.eu but has gaps. Actions needed: upgrade DMARC policy from 'none' to 'quarantine' or 'reject'. Until DMARC enforcement is active, spoofed emails may still reach recipients.

NIST CSFPR.AC-7

Email authentication is a required access control

How to fix this

1Upgrade DMARC policy to p=quarantine (then p=reject after monitoring)

2Verify with: nslookup -type=txt _dmarc.naunet.eu

3 items locked

Unlock the full action plan

Report unlocked.

At a glance

Full data from this scan

TLS Version

TLSv1.3

TLSv1.3 negotiated with TLS_AES_256_GCM_SHA384 (256-bit). Strong configuration with no deprecated protocols or weak ciphers detected.

DMARC Policy

p=none

Strengths: DMARC pct=100 — policy applies to all mail; SPF hard-fail (-all) configured; SPF DNS lookup count: 1/10 (within limit); DKIM configured (selectors: s1, s2). Issues: DMARC policy is 'none' (monitoring only, no enforcement); DMARC has no aggregate report URI (rua) — policy violations won't be reported.

SPF Record

Present

v=spf1 include:spf.protection.outlook.com -all

Security Headers

0/5 present

Missing: CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy

HSTS

Not enabled

Strict-Transport-Security header is missing. Connections can be downgraded to HTTP via man-in-the-middle attacks. If this domain is in the browser HSTS preload list, browsers may still enforce HTTPS — but the header should be present for full coverage.

SSL Certificate

Valid

Strengths: Certificate valid, 88 days remaining; Issued by Let's Encrypt.

DNSSEC

Not enabled

Strengths: 2 nameservers configured (ns27.domaincontrol.com, ns28.domaincontrol.com); SOA record present and MNAME consistent with NS set; 1 MX record(s) present; Zone transfers properly restricted on all nameservers; Address records present: 1 A record(s). Issues: All nameservers are from a single provider (domaincontrol.com) — a provider outage takes down the domain; DNSSEC not configured — DNS responses can be spoofed or tampered with in transit (DNS cache poisoning).

Similar companies

Other domains with comparable security profiles.