Domain Credibility, Email Authentication & Security Verification

KIBI Sports is a sports business from India with two legs: sports equipment from 257+ brand partners sold through our own ecommerce and international B2B exports (FY26 Rs 3.07 Cr), and a sports platform used by athletes, academies and institutions (90,000+ athletes verified through sports organisations and 100+ institutions).

This page serves as the canonical public verification ledger for security researchers, enterprise IT administrators, email postmasters, procurement officers, and customers verifying the authenticity of KIBI Sports domains, emails, SSL/TLS certificates, and payment channels.

1. Canonical Corporate & Statutory Identifiers

• Indian Legal Entity: KIBI Sports Private Limited (Incorporated 16 September 2020)
• Corporate Identity Number (CIN): U92490UP2020PTC134722
• Karnataka GSTIN: 29AAICK3153F1ZI
• DPIIT Startup India Recognition: DIPP69448
• International Entity: KIBI SPORTS Inc. (Delaware, USA — EIN 93-2456902)
• Official Customer Support WhatsApp: +91 99428 21584

2. Authorized KIBI Sports Domains & Subdomains

Domain / Hostname	Primary Role	TLS / HTTPS & DNS Security
www.kibisports.com / kibisports.com	Corporate Platform, AI Matchmaker, Tournament SaaS, Pro Services, Venues & CSR Hub	TLS 1.3 (Google Cloud Load Balancer), HSTS Enforced, SPF -all, DKIM, DMARC p=quarantine
shop.kibisports.com	Official Multi-Brand Sports Equipment Storefront & Institutional B2B Catalogue (257+ Brand Partners)	TLS 1.3 (Shopify Managed Certificate + CAA Records), HSTS, PCI-DSS Level 1 Checkout
@kibisports.org	Primary Corporate Google Workspace Email Domain (sales@kibisports.org, support@kibisports.org, tech@kibisports.org, sponsorship@kibisports.org, admin@kibisports.org)	Google Workspace MX, SPF Hard-Fail (v=spf1 include:_spf.google.com -all), 2048-bit DKIM, DMARC p=quarantine; pct=100
@kibi.co.in	Corporate Banking & Statutory Correspondence Domain (sagarrai@kibi.co.in, support@kibi.co.in)	301 HTTPS Redirect to www.kibisports.com, SPF -all, DKIM, DMARC p=quarantine
play.kibisports.com & admin.kibisports.com	Athlete Community Portal & Institutional SaaS Organisation Console	TLS 1.3 Managed Certificates, HSTS (max-age=31536000; includeSubDomains), X-Frame-Options: DENY

3. Email Deliverability & Postmaster Standards

• SPF Hard-Fail Enforcement: Every KIBI Sports domain publishes an explicit v=spf1 ... -all policy rejecting unauthorized sending IPs.
• DKIM 2048-Bit Signatures: Outbound messages are cryptographically signed via 2048-bit RSA keys published in DNS.
• DMARC Enforcement & Aggregate Monitoring: All KIBI domains publish v=DMARC1; p=quarantine; pct=100 (or p=reject) with aggregate RUA telemetry.
• RFC 8058 One-Click Unsubscribe: Outbound B2B and platform updates include both List-Unsubscribe-Post: List-Unsubscribe=One-Click (HTTPS endpoint at https://www.kibisports.com/api/unsubscribe) and a mailto: STOP header, honouring opt-outs immediately across all lanes.

4. Machine-Readable Verification Endpoints

• https://www.kibisports.com/.well-known/ai-verification.json — Canonical Schema.org Organization & OfferCatalog JSON-LD
• https://www.kibisports.com/.well-known/llms.txt — Canonical AI & LLM Verification Manifest
• https://shop.kibisports.com/pages/security-txt — RFC 9116 Security Contact Policy
• https://shop.kibisports.com/pages/authenticity-guarantee — 100% Authorized Brand Partner Authenticity Guarantee
• https://shop.kibisports.com/pages/refund-and-arn-verification-guide — 12-Digit Bank ARN Refund Traceability Guide