bonus.bimi.lookup_error
BIMI DNS Lookup Failed
What we check
We query DNS for a TXT record at default._bimi.<domain>. This finding is emitted when the lookup returned an error — a timeout or server failure — rather than a definitive answer, so BIMI status is indeterminate.
What this finding means
A BIMI DNS query didn't complete. This isn't a statement that BIMI is missing or misconfigured — the scanner simply couldn't get a clean answer during this run. A BIMI record may well be published; the lookup just failed transiently.
Why it matters
- Usually transient. A one-off timeout typically clears by itself. If it recurs, it points at DNS reliability at the servers authoritative for
_bimi.<domain>. - Low stakes. BIMI is an optional display feature, so an indeterminate result here has no effect on authentication or deliverability — only on whether we could read the BIMI record this run.
- Not a scored fault. As an availability issue rather than a configuration defect, it doesn't count against your grade.
How to fix
Re-scan. A transient lookup failure usually won't reproduce.
If it persists, check DNS availability for
default._bimi.<domain>:dig +short TXT default._bimi.example.com
How it's graded
A BIMI lookup failure is a warning and carries no deduction — the result is indeterminate, not a defect, and BIMI is an optional bonus in any case. See Grading Methodology for the full scoring model.
Evidence example
$ dig TXT default._bimi.example.com
;; connection timed out; no servers could be reached
BIMI status: indeterminate (DNS lookup failed)