How Keap Sends Your Email

Keap uses a shared IP pool to send outbound email. The IPs in this pool and their reputations are actively managed by Keap's Postmaster, Compliance, and Deliverability teams. Because the pool is dynamic, the IP address your email is sent from may vary based on the engagement history of the recipient contact.

Keep the following in mind when working with Keap's sending IPs:

• IPs change over time as infrastructure updates and mailbox provider requirements evolve. Do not rely on static IP allowlists that reference specific IP addresses.
• Use DKIM authentication instead of IP-based allowlisting. Authenticating your sending domain with DKIM is the recommended method for ensuring deliverability. If you need to allowlist Keap's sending infrastructure, use Keap's SPF record IP ranges rather than individual IPs.
• Use Keap's SPF records as the authoritative reference. When troubleshooting deliverability issues, always look up Keap's current SPF records to identify the authorized sending IP ranges. The SPF records reflect the live, current state of Keap's sending infrastructure.

How Keap Evaluates Contact Engagement

Before sending each email, Keap assigns a risk category to the recipient contact based on engagement indicators. The engagement signals Keap tracks are:

• Email opens
• Link clicks
• Web form submissions (available in Max Classic and Keap Ultimate)

These behaviors indicate how likely a contact is to engage positively with future messages. Keap uses this engagement level to determine which IP pool to use when sending to that contact, which helps protect IP reputation and maintain inbox placement.

Keap's IP Pool Structure

Keap organizes its outbound sending IPs into pools based on engagement quality. Each pool handles a specific tier of traffic to keep mailbox provider trust stable and prevent low-engagement sending from affecting high-engagement sending. The pools and their criteria are:

• Transactional — System-generated non-marketing email, including receipts, purchase confirmations, and password resets
• Super Pristine — Contacts who opted in via double opt-in and engaged within the last 30 days
• Pristine — Contacts who engaged within the last 30 days
• Good — Contacts who last engaged 31–75 days ago
• Mediocre — Contacts who last engaged 76–120 days ago
• Bad — Contacts whose last engagement was 121 or more days ago
• Never Engaged — Newly imported contacts, manually created contacts, or contacts with no engagement history

Note: Pool criteria may be adjusted over time as industry standards and performance data evolve.

How Keap Assigns a Sending IP for Each Email

For every outgoing email sent to a unique email address, Keap follows this process:

1. Keap evaluates the recipient contact's engagement history and assigns the contact to an engagement-based risk category.
2. Keap selects the IP pool that corresponds to that risk category.
3. A round-robin process selects a specific IP address within the chosen pool to send the email.

Because engagement levels vary across recipients in a list, a single broadcast or automation sequence can be delivered from multiple different IP addresses — one per recipient engagement tier. As a result, Google Postmaster Tools may display multiple IP reputation values associated with your domain's email activity. This is expected behavior and does not indicate a problem with your account.

How to Look Up Keap's Current Authorized Sending IPs

Because Keap's infrastructure no longer relies on static IPs — particularly after migrating to Google Cloud — always use live SPF record lookups to identify the current authorized sending IP ranges. The steps below use MXToolbox, a free DNS lookup tool.

SPF Record Lookup for infusionmail.com

1. Go to MXToolbox.
2. Enter infusionmail.com in the lookup field.

3. Select SPF Record Lookup from the lookup type options.

   

   

   The SPF Record Lookup results display the full SPF record for infusionmail.com, including all authorized IP ranges and include directives.

The SPF record for infusionmail.com may contain an entry such as a:infusionsoft.com. This entry means that the A record for infusionsoft.com — the IP addresses currently associated with infusionsoft.com — is also authorized to send email on behalf of Keap.

DNS Lookup for Additional Verification

To view the full set of DNS records associated with Keap's sending infrastructure — including A records, MX records, TXT records, and additional SPF components — perform a DNS lookup for infusionsoft.com using MXToolbox.

1. Go to MXToolbox.
2. Enter infusionsoft.com in the lookup field.

3. Select DNS Lookup from the lookup type options.

   

   The DNS Lookup results display all DNS record types associated with infusionsoft.com, including A records, MX records, and TXT records. Use these results to verify the full set of IP addresses and domain references that make up Keap's sending infrastructure.