B2B brand protection basics
How lookalike domains and fake pages reach your buyers, and what to fix first.
Free tool: brand risk check
A brand impersonation risk check in six questions
Six yes or no questions about the gaps that let someone send email as you, register a lookalike of your domain or take over a company account. Each "No" is an open door to close.
- About a minute
- No email needed
- Answers stay in your browser
At a glance
What the check covers
- Questions
- Six, each answered yes or no
- Areas
- Email authentication, domains, social accounts and leavers
- Result
- A score out of 6, what it means and where to start
- Your answers
- Stay in this browser tab. Nothing you answer is stored or sent.
The check
Answer six questions
Pick Yes or No for each. The check looks nothing up: it reads only your answers.
Brand risk check
Six questions, one minute
- DMARC on your main domain is set to quarantine or reject
- Your domains have registrar lock and MFA on the registrar account
- Someone is alerted when a lookalike of your domain is registered
- Company social accounts use MFA and company-owned emails
- Your team knows how to report a fake profile or site using your name
- Leavers lose access to brand accounts on their last day
0 of 6 answered
Your result
How to read your score
Each "Yes" adds one point. The bands say where to start, not how exposed you are compared with other companies.
Strong foundations
Score 5 or 6
The basics are in place. What is left is checking them from the outside: lookalike domains and fake profiles you have not seen yet.
Leaks likely
Score 3 or 4
Some doors are open. Close the email and domain gaps first, because they are the ones used for invoice and login scams.
Flying blind
Score 0 to 2
Most of the basics are missing. Start with DMARC and registrar access: both are owned in house and most fixes take days, not months.
Method
What each question checks
The six questions come from the brand lens of our free growth diagnostic. Here is why each one matters and what a "Yes" looks like.
Question 1
DMARC on your main domain is set to quarantine or reject
- Why it matters
- DMARC tells receiving mail servers how to treat mail that claims to come from your domain but fails authentication. At "none" the domain owner states no preference; "quarantine" marks such mail as suspicious and "reject" says it is not valid, as RFC 9989 defines them.
- A Yes looks like
- A DMARC record at p=quarantine or p=reject, reached in stages once the reports show your own mail passes.
Question 2
Your domains have registrar lock and MFA on the registrar account
- Why it matters
- Registrar lock (the clientTransferProhibited status) tells the registry to reject requests to transfer the domain, as ICANN describes it. MFA keeps one stolen password from opening the account that controls your DNS.
- A Yes looks like
- A transfer lock on every domain you use, MFA on the registrar login, and the account tied to a company mailbox.
Question 3
Someone is alerted when a lookalike of your domain is registered
- Why it matters
- A lookalike domain (a swapped letter, an added word) can carry fake invoices or login pages. An alert gives your team time to block or report it before it is used.
- A Yes looks like
- A watch on new registrations similar to your brand, and a named person who reviews each alert.
Question 4
Company social accounts use MFA and company-owned emails
- Why it matters
- An account tied to one person’s personal email leaves with them, and a password alone is easy to phish.
- A Yes looks like
- MFA on every company account, logins on a shared company mailbox and at least two admins.
Question 5
Your team knows how to report a fake profile or site using your name
- Why it matters
- Platforms act on reports from the brand owner, but only when someone files them with the right evidence.
- A Yes looks like
- A short written routine: where to report on each platform, what to capture and who files it.
Question 6
Leavers lose access to brand accounts on their last day
- Why it matters
- A former employee with live access can post, change settings or lock you out, by mistake or on purpose.
- A Yes looks like
- Brand accounts on the leaver checklist, with admin rights removed and passwords changed on the last day.
How the score works
Every question has the same weight, so the score is the number of "Yes" answers out of six. The check is a self-assessment: it does not look up your domain, scan anything or give a benchmark.
Your answers never leave the page. If you allowed analytics, we count that a check was finished and its score, never the answers. The free growth diagnostic runs the public checks for you: email authentication, lookalike domains, renewals and obvious fake profiles. DGo does not do legal takedowns or incident response. Specialist work goes to partners, and we name them in the proposal before you sign.
Sources
FAQ
Questions about the brand risk check
Anything else? Ask it on the diagnostic call, or write to [email protected]. We reply within one business day.
No. It reads only your six answers. The free diagnostic runs the public checks on your domains and brand names, with nothing to share in advance.
Find out where your brand is exposed
A 30-minute call, then your top 3 findings and a 30-day fix plan in writing within 2 business days.
Book a free growth diagnostic
No pitch and no commitment. You keep the findings.