Cold email infrastructure, explained: domains, inboxes, SPF, DKIM and DMARC
By Bridget Mao · October 12, 2026 · 3 min read
Cold email infrastructure is the set of domains, mailboxes, and authentication records that decide whether your message reaches an inbox or a spam folder. Before sending, you need separate secondary domains, mailboxes on those domains, SPF, DKIM, and DMARC records, a warm-up period of two to three weeks, and a per-mailbox sending cap. Skip any of these and the copy never gets read.
Why not send from your main domain
Your main domain is how customers, partners, and your own team reach you. If cold email from that domain draws spam complaints, your normal email can start landing in spam too. That is a serious cost for a small saving.
The fix is simple: buy secondary domains that look close to your brand, send cold email only from those, and leave the main domain alone. If a secondary domain is damaged, you retire it and replace it. Nothing important is lost.
The parts, in plain terms
Secondary domains. Variations on your company name, for example a different ending or a small word added. They exist only to send outbound.
Mailboxes. Real inboxes on those domains, with a real sender name. Several mailboxes per domain, each sending a small number of messages a day.
SPF. A record that lists which servers are allowed to send email for your domain. Think of it as a guest list at the door.
DKIM. A digital signature added to each message. It lets the receiving server confirm the message was not changed on the way and really came from you.
DMARC. A policy that tells receiving servers what to do when SPF or DKIM fail, and where to send reports. It ties the other two together.
Large mailbox providers have required this kind of authentication from bulk senders since 2024, so treat it as the entry ticket, not an extra.
Warm-up
A brand-new mailbox that suddenly sends hundreds of messages looks like spam, because that is what spammers do. Warm-up means starting with a trickle, gradually raising volume, and generating normal-looking back-and-forth activity. Plan on two to three weeks before real sending starts. Use that time to build the list and write the copy.
Volume caps
Keep a firm daily limit per mailbox, permanently, not only at the start. If you need to send more, add mailboxes, do not push the ones you have. Spreading volume across several mailboxes also means one problem does not stop everything.
The list matters as much as the setup
Bounces damage your sender reputation. Verify every address before sending and remove the ones that fail. A clean list on weak infrastructure and a dirty list on strong infrastructure both end in spam.
Time and risk
Setting this up properly takes roughly five to ten hours the first time, and one wrong record can burn a domain. That is the reason many teams hand it off rather than learn it on live domains.
A short setup checklist
- Buy secondary domains, never the main one.
- Create mailboxes with real sender names.
- Set SPF, DKIM, and DMARC on every domain.
- Start warm-up and leave it running for two to three weeks.
- Verify the list while warm-up runs.
- Set a per-mailbox daily cap and keep it.
- Check bounce and reply rates weekly, and pause anything that drifts.
Frequently asked questions
Can I use my main domain if I send only a few emails?
It is safer not to. Even a small number of complaints can affect the domain your team and customers rely on.
How many mailboxes do I need?
It depends on volume. The rule is to cap each mailbox at a small daily number and add mailboxes to scale, not raise the cap.
What if my emails are already going to spam?
Check authentication first, then list quality, then volume. Most outbound that fails has an infrastructure problem, not a copy problem.
How long does warm-up take?
Two to three weeks before real sending. Sending sooner raises the chance of landing in spam.
Is this the same for PE firms and SaaS companies?
Yes. The infrastructure is the same. What changes is the list and the message. See how private equity firms source off-market deals.
Book a discovery call: Want this set up for your own business? Book a discovery call with me.