Overview

Certra Domain Assessment performs an assessment of a domain's email security posture and converts disparate data points into a concise risk snapshot in an easy to understand interface. Quickly identify potential email stability issues and address configurations that specifically allow you to better protect your brand, and those that trust it, against cyber enabled fraud.

• Unified risk score (0–100%) plus a concise /10 badge for quick review.
• Per-record validation with targeted explanations and remediation cues.
• Infrastructure context: shared vs dedicated classification and provider trust indicators.
• Duplicate include: detection to reduce SPF lookup pressure.
• Simple JSON API for automation and monitoring workflows.

Quick Start

1. Enter a domain (e.g., example.org).
2. Review the score and gradient bar for an initial posture assessment.
3. Expand SPF / DKIM / DMARC panels to view pass / fail details with supporting evidence.
4. Address red (critical) findings first, then amber warnings (lookup usage, weak policies, etc.).
5. Allow DNS to propagate, re-run to verify remediation.

Need guidance? Trying to solve a specific security related problem? Maybe you're trying to tackle malicious fraud related spoofing? We can assist! help@certra.co.za

Core Concepts

Risk Scoring

The score combines record correctness, policy strictness, structural health (lookup count, duplication), and infrastructure hygiene context. A higher score indicates reduced residual risk and more stable deliverability.

• 90–100: Strong posture—maintain monitoring and incremental hardening.
• 70–89: Functional baseline—prioritize closing enforcement and efficiency gaps.
• <70: Elevated exposure—resolve fundamental misconfigurations promptly.

Section Status

Each section exposes a status: Green indicates configuration is sound; Red signals material defects. Amber highlights transitional or capacity conditions (e.g., nearing the SPF 10 lookup threshold).

Infrastructure Findings

Infrastructure findings surface patterns (extensive shared hosting, higher-risk providers, consolidation of services) that may warrant broader platform adjustments beyond record edits.

Visually Similar Domain Scanning

The visually similar domain scan enumerates domains that are visually or typographically similar to your original domain. This helps identify potential phishing, brand impersonation, or typo-squatting risks that could impact your organization or users.

Badges

• The original domain is always shown at the top of the results, clearly marked with an original badge.
• Each similar domain is checked for key risk indicators:
  • Email — Whether the domain is configured to handle email (has functional MX records).
  • Newly Registered (<30d) — Domains registered in the last 30 days are flagged as high risk.
  • Recently Registered (<90d) — Domains registered in the last 90 days are flagged as medium risk.
  • new — Domains not seen in your previous scans are highlighted for attention.
  • Suspicious — Domains generated by a homoglyph finding (visually deceptive character swaps) are flagged as suspicious.
  • Subdomain — Indicates a subdomain of a likely unrelated domain. These are often false positives due to domain registrars using wildcard DNS to redirect traffic to their own site.

For advanced monitoring or takedown support, contact us: help@certra.co.za

Glossary

Interested in continuous monitoring or progressing enforcement? Contact us. help@certra.co.za