Challenge

SHED needed reliable delivery for patient communications and transactional notifications while preventing spoofing attacks and authentication failures. High spoofing activity, unmapped marketing subdomains, HTML fragmentation, failed SPF authentication for Intercom, and limited visibility into blocked emails reduced deliverability and customer trust.

Why Skysnag

Skysnag resolved authentication issues by reverse-mapping Intercom-issued IPs, securing shadow subdomains, enforcing domain-specific DMARC policies, normalizing email templates, and assisting with dedicated IP deployment. The engagement also prepared SHED for BIMI by registering its trademark and completing EV/OV readiness.

Rollout model

The implementation focused on restoring authentication integrity, improving sender reputation, and providing complete visibility into email delivery across all sending services.

Rollout steps

1. Restore sender authentication – Reverse-mapped Intercom-issued IPs through SparkPost to achieve a 100% SPF pass rate across transactional email.
2. Secure the domain ecosystem – Identified shadow subdomains, enforced domain-specific DMARC policies, and normalized HTML templates for consistent inbox rendering.
3. Improve sender reputation – Assisted with dedicated IP deployment, removed blacklisted shared IPs, and prepared the organization for BIMI through trademark registration and EV/OV readiness.

Results and proof signals

Within 30 days, SHED eliminated spoofing activity, improved deliverability, and achieved complete authentication visibility across its email infrastructure.

Results stats

What this means for organizations

Organizations that rely on transactional and customer communications can strengthen trust, improve inbox placement, and eliminate authentication issues by standardizing email authentication, securing every sending domain, and maintaining complete visibility into email performance.