BIMI Record Checker
Review your BIMI record and logo prerequisites without assuming that every inbox will display your brand.
Enter a domain and optionally a BIMI selector. A blank selector uses default. Logo retrieval is HTTPS only, bounded and protected against internal network access.
No registration required. Checks run on our server using Google Public DNS. Our DNS cache lasts up to five minutes; upstream DNS caches can delay changes further. No email test allowance is used.
How to use BIMI Record Checker
- Find the brand’s sending domain in its email From address and the BIMI selector, if one is configured, in your mail or DNS administration settings.
- Enter the bare domain. For the illustrative lookup
default._bimi.example.com, enterexample.comand leave Selector blank, or enterdefault. - If you use a different selector, enter only that value. Blank always means
default; this tool does not search for other BIMI selectors. - Select Check BIMI. Review the DNS record, any retrieved logo and the DMARC prerequisite. Use the named URL or DNS finding to decide which provider or asset needs attention.
What this tool checks
The checker reads selector._bimi.domain through Google Public DNS. When a recognized record is available, it inspects these parts:
- A unique
v=BIMI1record, tag syntax and the presence of thellogo tag. Emptyl=is reported as opting out of logo display. - HTTPS syntax for the logo and optional
aevidence URL. The evidence URL is not fetched and its certificate is not validated. - The logo response, when its URL passes validation: HTTPS with certificate verification, no redirects, public destinations only and a 32 KB inspection limit.
- The response MIME type (the server’s content-type label), well-formed SVG XML, selected unsafe or unsupported SVG features, and the Tiny-PS version, profile and title declarations.
- Whether the discovered DMARC settings request quarantine or reject, without a partial legacy
pctvalue ort=ytest mode.
The SVG inspection is not full Tiny-PS schema validation and does not certify logo dimensions or brand rights. The DMARC row is a prerequisite check, not a complete DMARC verdict; inspect the full DMARC findings before enforcement. The fetched logo is never inserted into this page.
Understanding your results
Use SVG Tiny-PS artwork and review your mailbox provider’s VMC/CMC requirements. Evidence certificate validity is not verified by this tool. Logo display remains provider-dependent.
| Finding | Meaning & likely cause | Next action |
|---|---|---|
| Info: not published / empty logo / no evidence | BIMI is absent, l= opts out, or the optional evidence URL is omitted. These are different publication choices. | Decide whether to deploy BIMI; if so, configure the logo and review the intended mailbox provider’s requirements. |
| Fail: record / URL syntax | Duplicate records, malformed tags, a missing logo tag or an invalid HTTPS URL was found. | Publish one correct record and use an HTTPS asset URL on port 443. |
| Pass: URL / SVG checks | The specific URL, XML structure, safety inspection or declaration check passed. | Continue through every row. URL syntax passing does not mean a certificate or logo has been approved. |
| Fail: logo fetch / SVG format / safety | The resource returned an HTTP error, was blocked, is not valid SVG, or contains detected unsupported features. | Serve the SVG directly at its HTTPS URL; remove active or external content and re-export the artwork. |
| Warning: MIME type / Tiny-PS declaration | The server does not label the file image/svg+xml, or required profile declarations/title are missing. | Correct the server Content-Type or export SVG Tiny-PS, then validate the artwork with a dedicated schema validator. |
| Warning: DMARC prerequisite | Enforcement was not established from the discovered settings, for example with p=none, partial pct or test mode. | Review the full DMARC policy and legitimate sender alignment before changing enforcement. |
| Unknown: DNS / logo / DMARC lookup | A lookup or HTTPS request could not complete. A timeout, TLS certificate problem or fetch limit can make the result inconclusive. | Check the reported name or URL and retry. Do not replace a record solely because the query was unavailable. |
What is BIMI and why does it matter?
Brand Indicators for Message Identification (BIMI) publishes a reference to a brand logo in DNS. Participating mailbox providers can use that reference alongside their own authentication, reputation and certificate requirements when deciding whether to show a logo.
SVG Tiny-PS is a restricted vector image profile used for BIMI artwork. A Verified Mark Certificate (VMC) or Common Mark Certificate (CMC) can provide evidence associated with a mark; this checker only examines the syntax of the evidence URL. Use it to troubleshoot publication and inspect the logo file before provider-specific review. A passing result does not promise logo display or better email delivery.
Frequently asked questions
Where do I find a custom BIMI selector?
Check your BIMI DNS record name or the sending service’s BIMI configuration. The selector is the portion before ._bimi. If you have not configured a custom selector, leave the field blank to check default.
Why is a missing BIMI record shown as Info?
BIMI is optional. An absent record means no recognized BIMI policy was found at that selector. It is different from publishing duplicate records or malformed settings, and it does not mean ordinary email authentication has failed.
My logo is an SVG. Why does it still get warnings?
Ordinary SVG can contain features this inspection rejects, or omit the Tiny-PS declaration and title. A correct file can also be served with the wrong Content-Type. Follow the specific finding; these checks do not replace full Tiny-PS schema validation.
Does an Evidence URL Pass confirm that my VMC or CMC is valid?
No. It only means the URL passes the implemented HTTPS syntax check. The tool does not download the evidence certificate, check its issuer or expiry, or verify rights to the brand.
I changed the logo or DNS. Why is the result or inbox logo unchanged?
Confirm that you edited the queried selector and the asset at the exact l= URL. Our DNS cache lasts up to five minutes and upstream caching can persist longer. This tool fetches the logo for inspection, but mailbox providers make separate display and caching decisions; no fixed inbox update time is established here.
