Who Is Behind the Domain Kmail-Lists? Here’s Who

Here’s a random question that we were asked “We just got an email with an unsubscribe link going to kmail-lists.com; who is behind kmail-lists?” It turns out that it’s pretty hard for at least the average person to figure out who is responsible for the kmail-lists.com domain; the ESP behind kmail-lists.com is Klaviyo, who is an ESP for primarily B2C businesses, in fact they are a primary competitor to Shopify, who used to dominate the B2C (‘business to consumer’) and D2C (‘direct to consumer’) ESP space.

Now, before we get to a representative set of headers demonstrating that kmail-lists.com is a Klaviyo.com property, we want to say up front that while these headers are from a piece of spam sent through Klaviyo, generally speaking Klaviyo is known for its complete intolerance to spamming. All ESPs of any size will end up onboarding spammers from time-to-time, it comes with the territory. It’s what they do and how they handle it when notified of the abuse that is a better measure of the reputation and quality of an ESP, not to mention their resulting deliverability.

These below headers are from a spam that we received directly to our scraped support address on May 4th, 2023, from spammer Peppermate (and yes, we reported them to Klaviyo). The relevant items are in bold red font, all of which are Klaviyo properties.

Headers showing that kmail-lists.com is a Klaviyo property

Peppermate <in**@pe********.com> – Ticket created [Reply] [Comment] [Forward]
List-Unsubscribe: https://manage.kmail-lists.com/subscriptions/unsubscribe?a=NbRT6J&c=01GPKC1CCZRZ8JS7HTKVHV2R9H&k=826b5d6bcea8d29a323339a7d0f99684&m=01GZHM3PRA4017XY05Y6S444WM&r=V33BKKK
MIME-Version: 1.0
X-RT-Incoming-Encryption: Not encrypted
From bounces+13995800-094d-support=is*******@u1*****.net Thu May 4 16: 03:27 2023
X-Rspamd-Action: no action
X-Kmail-Ops: 01GPKC1CCZRZ8JS7HTKVHV2R9H
X-Entity-ID: rNxBv1GmgeDc0hJu58h36A==
X-Kmail-Message: 01GZHM3PRA4017XY05Y6S444WM
X-Spamd-Bar: +++
Authentication-Results: concerto.isipp.com; dkim=none (“invalid DKIM record”) header.d=peppermate.com header.s=kl header.b=VH3OYh2J; spf=pass (concerto.isipp.com: domain of “bounces+13995800-094d-support=is*******@se**.com” designates 168.245.125.63 as permitted sender) smtp.mailfrom=”bounces+13995800-094d-support=is*******@se**.com”; dmarc=none
Date: Thu, 04 May 2023 16:03:17 +0000 (UTC)
X-SG-ID: N2C25iY2uzGMFz6rgvQsb3WdckyvbC2eFaxvdDHn8D1nndBBW0fUClUlZF2fTQ6K1nla6C72IXwqLKHk+xvl1DZozlHgiyHGwJQqtFFFD6ial5LRRG02ayd6SaWzZbltv623AHS+s0n7iwGNA4EFRhUcklB7XDQqodQ7v1R1Bxcn4Cve0Ykh9jMHkEA4buXVmIrlfJ7ZDd5E06rC6iue20v0NY92F1O7mxYszWuRG/Y=
Received: from o1401.shared.klaviyomail.com (o1401.shared.klaviyomail.com[168.245.125.63]) by concerto.isipp.com (8.15.2/8.15.2/Debian-22) with ESMTPS id 344G3Ilf1373903 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <su*****@is***.com>; Thu, 4 May 2023 16:03:24 GMT
Received: by filterdrecv-7946957d94-g6bpl with SMTP id filterdrecv-7946957d94-g6bpl-1-6453D745-75 2023-05-04 16:03:17.425946092 +0000 UTC m=+787538.659143059
Received: from MTM5OTU4MDA (unknown) by geopod-ismtpd-37 (SG) with HTTP id ke054h6gSHagYT4PmZGiFQ Thu, 04 May 2023 16:03:17.327 +0000 (UTC)
X-SG-Eid: R01MIHb0kvWc4Z9FMcN4QGwnei7mLY8i+6Zf3hPM8IZh8MXL3dl8z1cKlarBvuvwZQbC0D5p0k/GfC3/5ix8rSBBgDyTiDPXVXs/TpXo2SmnsYPSyStIEuC0GYlr3NkweNVlcDaKh+i/F742gNoF5VMJXk/mRDMGgOTTBgrTIR/ZRTcIHTytc3pmowQwmWTlX4QhlDA4VIBVUOMgVPSW2RfS1FImQhK0DaK3VaXc1lg1mO8bOvbyBi6jySXTm2Jv
X-Rspamd-Server: concertino
Subject: Celebrating all the wonderful mothers
X-Rspamd-Queue-ID: 344G3Ile1373903
To: su*****@is***.com
X-Kmail-Relay: [665318.krelaymail.com]:587
From: “Peppermate” <in**@pe********.com>
X-Spamd-Result: default: False [3.68 / 7.00]; DCC_REJECT(2.00)[bulk Body=1 Fuz1=1 Fuz2=many rep=60% ]; MID_RHS_NOT_FQDN(0.50)[]; MV_CASE(0.50)[]; MANY_INVISIBLE_PARTS(0.40)[5]; ZERO_FONT(0.30)[4]; FORGED_SENDER(0.30)[in**@pe********.com,bo*****@se**.com]; R_SPF_ALLOW(-0.20)[+ip4:168.245.0.0/17]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; MX_GOOD(-0.01)[]; HAS_LIST_UNSUB(-0.01)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[168.245.125.63:from]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DMARC_NA(0.00)[peppermate.com]; R_DKIM_PERMFAIL(0.00)[peppermate.com:s=kl]; RCPT_COUNT_ONE(0.00)[1]; FROM_HAS_DN(0.00)[]; TAGGED_FROM(0.00)[13995800-094d-support=isipp.com]; ARC_NA(0.00)[]; NEURAL_SPAM(0.00)[0.202]; TO_DN_NONE(0.00)[]; FROM_NEQ_ENVFROM(0.00)[in**@pe********.com,bo*****@se**.com]; DKIM_TRACE(0.00)[peppermate.com:~]; ASN(0.00)[asn:11377, ipnet:168.245.96.0/19, country:US]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; RCVD_COUNT_TWO(0.00)[2]
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=peppermate.com; h=content-type:from:mime-version:subject:list-unsubscribe:to:cc: content-type:from:subject:to; s=kl; bh=2o9BK18xIpcZPyWlqFO6XPRLstXZodbJxCogAzIjxYY=; b=VH3OYh2Jykml9wNibHCU37+VJT9k/zqJff/BTBM6u47CS1vPf+H86+ylRvSgnmla9vrK ehL5WKilqooSUNJSqjgDzFyI475uiGkI5S65mMMdo+iiPPZ/m8T9109iIIlgvDExtbPJ/y UOgNL6XcBgok4+7dL9yKHLJ6EczZhDpfMpRXL2htmFrayQ6rPgflKZlmwm1zRDL8rCwb9j N619+0qZX2Ms95/79UNgmhT7GlbMnmvOYii8MlVDh1svEnwqYvQKtbbPCYh5Te48MwpjeE lY8xwDvCDtMGqx4KC+aV90S4ZpN/jIqO9h3iv+2S3YzvtwJZFg9LyXfbkyLWqlEQ==
X-Kmail-Account: NbRT6J
Content-Type: multipart/alternative; boundary=”b1ea4d33e160d714de6a81df874b33e1d0798a20f68198f3a4fc92887913″
Message-ID:
X-RT-Interface: Email
Content-Length: 0
Content-Transfer-Encoding: