Free domain tool
Read the default._bimi record, see what logo and certificate it declares, and check whether DMARC is enforced enough for any of it to take effect.
A correct BIMI record does nothing on its own. BIMI applies only to domains whose DMARC policy is quarantine or reject, so with the policy at none the record is inert however well it is written. That is the first thing this checker reports.
BIMI is a brand visibility feature, not a security control, so not having it is not scored as a weakness here. CloudSpex does not download the logo or the certificate and cannot promise any mailbox provider will show a logo — that decision is theirs. To fix the DMARC precondition, use the DMARC Checker.
BIMI (Brand Indicators for Message Identification) lets a domain publish a logo that some mailbox providers show next to its messages. It is a brand visibility feature that builds on email authentication — it does not add protection of its own.
No. A domain without BIMI is no less protected than one with it. This checker produces no score at all when there is no record, because scoring the absence of a brand feature would present it as a security gap.
Almost always because DMARC is not enforced. BIMI only applies to domains whose DMARC policy is quarantine or reject. With the policy at none the BIMI record is inert no matter how correct it is, and this is the first thing the checker reports.
It depends on the provider. Some, Gmail among them, only display a logo when the record points to a verified mark certificate; others do not require one. A record without a VMC is not broken — it just limits where the logo can appear.
No. This checker reads the DNS record and does not download the logo or the certificate, so it cannot tell you whether the file is a valid SVG Tiny PS image or whether the certificate is valid. Where the URL does not look like an SVG, that is an observation about the address, not the image.
No, and nothing here should be read that way. Each mailbox provider decides on its own whether to show a logo, using criteria it does not publish in full. This checker reports what the record declares and whether the DMARC precondition is met.
It is a deliberate statement that the domain supplies no logo. The draft treats that as a valid record rather than a mistake, so it is reported as a declaration and not as a misconfiguration.
In a TXT record at default._bimi under your domain, for example default._bimi.example.com. Senders can point at other selectors with a BIMI-Selector header; this checker reads the default selector.