Building a Cold Email Infrastructure That Won't Get Your Domain Burned

The Core Problem With Cold Email

Cold email is fundamentally different from newsletter or transactional mail. Recipients haven't opted in, engagement rates are lower, and a meaningful percentage will hit "Report spam" even on a well-crafted outreach message. Run cold email campaigns from your primary business domain and you're gambling that reputation on every send. One bad campaign—or a bad list—can take a main domain from excellent deliverability to spam-folder purgatory in days.

The solution is dedicated cold email infrastructure: separate domains, separate IPs, and sending practices tuned specifically for the low-engagement reality of outbound prospecting.

Use a Separate Sending Domain

Register a domain specifically for cold outreach. It should be clearly related to your brand but distinct from your main domain. Examples:

• Main: yourcompany.com → Cold: getyourcompany.com or yourcompanyhq.com
• Main: acmecorp.com → Cold: acmesales.com or acmeteam.com

If the cold domain gets blocklisted or its reputation tanks, your main domain is unaffected. You can rotate to a fresh domain while repairing the damaged one.

Age the domain before sending. Freshly registered domains are inherently suspicious—many spam filters apply extra scrutiny to domains less than 30 days old. Buy domains a month or two before you need them, publish authentication records, and let them age.

Set Up Authentication Correctly

Authentication on a cold sending domain is non-negotiable. Without it, you'll hit spam filters before even getting a chance to be judged on content.

• SPF: Authorize only the IPs that actually send your cold mail. Keep the record clean.
• DKIM: Configure a 2048-bit key. Some outreach tools handle this for you; verify the key is actually published.
• DMARC: Start at p=none and move to p=quarantine once sending is stable. At least gives you visibility into who's sending from the domain.
• PTR record: If using a dedicated IP, ensure the reverse DNS resolves correctly.
• MX records: Configure MX records so replies can actually reach you. A domain that can send but not receive looks suspicious.

Warm the Domain and IP Before Launching Campaigns

Even with perfect authentication, starting at full campaign volume from a new domain will trigger spam filters. The warmup approach for cold email differs from newsletter warming because you don't have an existing list of engaged subscribers to prime the pump.

Use a dedicated warmup tool or service during the first 3–4 weeks. These tools send automated back-and-forth emails between a network of real mailboxes, generating positive engagement signals (opens, replies, moving from spam to inbox) that establish a baseline reputation. After warmup, start real campaigns conservatively—50–100 prospects per day per mailbox—and scale from there.

Mailbox Limits and Multi-Mailbox Strategy

Don't send all your cold email from a single mailbox address. Most cold email practitioners use multiple mailboxes across one or more domains and cap each one at 30–50 outbound messages per day. That ceiling varies by provider: Google Workspace and Microsoft 365 have different internal sending triggers, and staying well below the algorithmic thresholds matters more than hitting exact numbers.

A practical setup for 500 cold emails per day:

• 2 domains, 5 mailboxes total
• Each mailbox sends 50 emails per day during business hours
• Sending spread across the day, not batch-blasted at 9 a.m.

List Quality Is Your Biggest Lever

The most common reason cold email infrastructure gets burned isn't sending volume—it's list quality. Sending to outdated, unverified, or purchased lists means high bounce rates and spam complaints, which are the two fastest ways to destroy a domain's reputation.

Before importing any list to your cold email tool:

1. Run it through an email verification service to remove invalid and catch-all addresses
2. Remove any generic role addresses (info@, support@, admin@)—these often feed spam traps
3. Keep hard bounces below 3% per campaign; if you exceed that, pause and clean the remaining list

Content and Personalization

Spam filters evaluate content signals alongside authentication. Template-blast emails with no personalization look exactly like spam because they often are. A few content practices that help:

• Plain-text or minimal HTML — heavy HTML with tracking pixels and multiple links performs worse in cold contexts
• Genuine personalization — mention something specific about the prospect or their company, not just {{first_name}}
• One clear CTA — not three different calls to action fighting for attention
• Easy opt-out — even without a legal obligation in every jurisdiction, including an unsubscribe option reduces spam complaints

Monitor Reputation Continuously

Google Postmaster Tools tracks reputation at the domain level. Set it up for every cold sending domain and check it weekly. A reputation signal dropping from "High" to "Medium" is a warning; "Low" or "Bad" means stop sending immediately and diagnose the problem.

Also monitor blocklists. Automate daily checks of your sending IPs and domains against Spamhaus, Barracuda, and similar lists. Getting listed and catching it quickly is far better than sending for a week into blocklist-triggered deferrals.

If you're looking for a reliable SMTP relay purpose-built for controlled sending, MailDog's SMTP service gives you the delivery infrastructure while you manage the campaign layer. The pricing page covers volume-based plans that fit outreach workloads. For the authentication setup that every cold email domain needs, see our post on why emails land in spam and how to fix it.