I assume the domain in To: klm@[domain] is used elsewhere?
I've never head of Cygnific until now, but maybe that's just me. However, I guess KLM related people to know about them, in which case it's your domain that's been picked up and they are randomly firing emails to klm@anydomain in the hope some KLM employee thinks they recognise and trust Cygnific?
Makes more sense than them getting hold of a load of KLM customer addresses and sending mails to them from an apparently-random-to-average-Joe organisation.
I've not had one BTW.