BIMI logo and verified checkmark are spoofable in Gmail
infosec.exchange