Enter a domain to read its BIMI record, see the logo and certificate it points to, and check the DMARC policy that decides whether any logo can show at all.
Loading tool…
Lower stack cost. Back in the inbox. Built to send at any scale.
We rebuild it properly: secondary domains, inboxes, SPF, DKIM and DMARC set to enforcement, warmup and safe sending limits, blacklist monitoring on top. Send-ready in about 17 days. No campaigns, no copy, no lead lists. Infrastructure only.
Almost a decade building cold outreach infrastructure, including his own sending and verification stack built from scratch. 20+ B2B clients at companies worth $10M and above, all in tier one countries.
Free · Written plan + fixed price · No sales call required
BIMI is the standard that puts a brand logo next to a message in the inbox. This tool reads the TXT record at default._bimi for your domain and shows it raw, then pulls out the two URLs that matter: l=, the logo file, and a=, the certificate file when one is published. It also reads your DMARC record, because BIMI logos only display when DMARC is at p=quarantine or p=reject. A perfect logo record with a weak DMARC policy still shows nothing, and this tool says so plainly. Compare the policy with the DMARC Checker if you need the full text.
A found record with an l= logo URL is the starting point, not the finish. The logo has to be a square SVG file served over HTTPS, the domain has to pass the DMARC gate above, and some mailbox providers also want a certificate at the a= URL before they will render anything. If the logo fetch cannot be completed from your browser, the tool says so rather than guessing. That happens when the logo host blocks cross origin reads, and it does not by itself mean the logo is broken.
No record means publishing a TXT record at default._bimi that starts with v=BIMI1 and points to your logo. A weak gate means fixing DMARC first: authenticate your senders, read your reports with the report tool on this site, then move the policy to quarantine or reject. Do the DMARC work before you pay for a certificate, because the certificate does not help while the gate is closed. Run the domain through the Email Authentication Checker to see SPF, DKIM and DMARC together.
It covers what is broken, what we would build, the timeline, and one fixed price. Want it walked through instead? Book a 15 minute plan walkthrough.
Or just reply to the plan email. Either works.
