DNS / email · Check
BIMI record present — verifying the visible-logo path
Brand Indicators for Message Identification (BIMI) lets supporting mailbox providers display your verified logo next to authenticated mail. Detection of a BIMI record is informational — verify that the SVG it points to is reachable and the mark certificate (VMC) is valid if you've gone that route.
Real-world risk
BIMI is informational here: mailbox logo display still depends on DMARC enforcement and mailbox provider support.
Fix steps (in order)
- Keep DMARC at enforcement (p=quarantine/reject) and follow your BIMI CA/VMC requirements for participating providers.
Topic explainer
DMARC, SPF, and DKIM explained: the email authentication trio →
A practical guide to email authentication: what SPF, DKIM, and DMARC each do, why all three are needed, and how to roll out a DMARC policy that actually blocks spoofed mail.
Verify the fix in 30 seconds
Run a Scorifya scan on the affected host after deploy. The same finding id (dns_bimi_record_present) clears once the externally-observable signal is in place.