Hacker News Reader

What's keeping me, (as an attacker) from setting up phishing domain with same logo for BIMI?

You will need Verified Mark Certificates (VMC's) issued by a Certificate Authority.