What is cold email infrastructure?
Cold email infrastructure is the technical foundation that determines whether your outbound emails reach the inbox or land in spam. It includes your domains, DNS authentication records, mailbox providers, warmup processes, email verification, sending tools, and ongoing monitoring.
If you're an SDR, BDR, or running a GTM team, your infrastructure directly controls your reply rates. A poorly configured setup means burned domains, blacklisted IPs, and wasted pipeline. A properly built one delivers 90%+ inbox placement and consistent engagement.
Without proper infrastructure
- Your emails land in spam folders silently
- Your primary domain gets blacklisted
- Reply rates drop below 1%
- You waste hours on leads who never see your message
With proper infrastructure
- 90%+ inbox placement across Google and Outlook
- Bounce rates under 1%, spam complaints under 0.1%
- Consistent 3-8% reply rates
- Scalable pipeline that grows with your team
The complete cold email stack
Every step builds on the last. Skip one, and your deliverability suffers downstream. Here is the full pipeline you need to set up, in order.
Step 1
Domains
Step 2
DNS
Step 3
Mailboxes
Step 4
Warmup
Step 5
Verify
Mailsfinder
Step 6
Send
Step 7
Monitor
Buy secondary domains
Never send cold emails from your primary company domain. If your outreach triggers spam complaints or high bounce rates, it damages deliverability for all company email, including invoices, client replies, and internal communication. Recovery takes weeks to months.
Secondary domains act as a protective buffer. If one gets burned, you retire it and rotate in a new one. Your core brand domain stays clean.
How many domains do you need?
Use this formula to calculate your domain count based on your target daily sending volume:
200/day: 2 domains, 6 mailboxes
500/day: 5 domains, 15 mailboxes
1,000/day: 10 domains, 30 mailboxes
Domain naming conventions
Where to buy: Cloudflare Registrar ($10.44/yr, at-cost pricing) or Porkbun ($11.08/yr, free SSL). Both offer clean DNS management. Avoid GoDaddy due to renewal price jumps.
Set up DNS authentication
SPF, DKIM, and DMARC are the three DNS records that prove your emails are legitimate. As of 2026, emails from domains without proper DMARC are rejected outright by Gmail, Yahoo, and Microsoft. Not filtered to spam. Rejected.
Set up all three records on every secondary domain before creating mailboxes. The order matters: SPF first, then DKIM, then DMARC. Allow 24-48 hours for DNS propagation before testing.
SPF (Sender Policy Framework)
codeTells receiving servers which mail servers are authorized to send email on behalf of your domain. You can only have one SPF record per domain.
For Google Workspace:
v=spf1 include:_spf.google.com ~all
For Microsoft 365:
v=spf1 include:spf.protection.outlook.com ~all
DKIM (DomainKeys Identified Mail)
lockA cryptographic signature attached to every email you send. It verifies the message wasn't tampered with during transit.
Google Workspace setup:
1. Google Admin Console → Apps → Gmail → Authenticate email
2. Select domain → Generate new record (2048-bit)
3. Add TXT record at google._domainkey
4. Return to Admin Console → Start authentication
Microsoft 365 setup:
1. Microsoft uses CNAME records (not TXT like Google)
2. Add CNAME at selector1._domainkey
3. Add CNAME at selector2._domainkey
4. Both point to your .onmicrosoft.com domain
DMARC (Domain-based Message Authentication)
policyTells receiving servers what to do with emails that fail SPF or DKIM checks. Start with monitoring mode and progressively tighten enforcement.
Recommended DMARC record:
v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
Progression strategy:
Weeks 1-2: p=none (monitoring only)
Weeks 3-4: p=quarantine (spam suspicious emails)
Week 5+: p=reject (block unauthorized emails)
How to verify: Use MXToolbox to validate SPF, DKIM, and DMARC records. You can also send a test email to a Gmail account, open the email, click the three dots, and select "Show original" to check authentication results.
Set up your mailboxes
You need 2-3 mailboxes per domain. Use real human names (john@tryacme.com, sarah@getacme.com), never generic addresses like sales@ or info@. Generic addresses get flagged by spam filters immediately.
You have two main options for provisioning mailboxes at scale: Google Workspace and Microsoft Outlook. Many agencies use both to diversify their sending infrastructure.
Google Workspace
via Zapmail.ai
- check Higher inbox placement rates for cold email
- check Better warmup tool compatibility
- check Simpler DKIM/SPF setup
- check 30-50 emails/mailbox/day safe limit
- check Automated DNS setup via Zapmail.ai
Zapmail automates domain provisioning, DNS configuration, and mailbox creation. Setup takes minutes instead of hours.
Microsoft Outlook
via Highsend.io
- check Extremely cost-effective at scale
- check 99 mailboxes per domain included
- check Up to 5 emails/mailbox/day
- check Better for Outlook-to-Outlook delivery
- check Automatic SPF/DKIM/DMARC configuration
Highsend provisions Outlook mailboxes in 2-7 hours with automatic DNS setup. Great for high-volume inbox rotation.
Which one to pick? Start with Google Workspace if you're new to cold email. It's simpler to set up and has broader tool compatibility. Add Outlook mailboxes later to diversify. Many agencies run a 60/40 mix of Google and Outlook.
Warm up your inboxes
Warmup builds your sender reputation by exchanging real emails with a network of accounts that open, reply, and rescue your messages from spam. It trains Gmail and Outlook to trust your new mailboxes.
For new domains, warmup takes 2-4 weeks minimum. Do not send any cold emails during the first two weeks. The temptation to skip warmup is strong, but launching cold campaigns from unwarm mailboxes is the fastest way to burn your domains.
| Period | Daily Volume | Cold Emails | Action |
|---|---|---|---|
| Days 1-3 | 3-5/day | 0 | Warmup only. Verify DNS is passing. |
| Days 4-7 | 5-10/day | 0 | Warmup only. Monitor open rates. |
| Days 8-14 | 10-25/day | 0 | Warmup only. Build baseline reputation. |
| Days 15-21 | 25-40/day | 5-15/day | Start light cold outreach alongside warmup. |
| Day 22+ | 20-30/day | 25-35/day | Full sending. Keep warmup running permanently. |
Plusvibe
From $37/month
Private warmup pool with unlimited inboxes. Auto-SPINTAX generates natural email variations. ESP matching rotates IPs based on the recipient's provider.
Instantly
From $37/month
Warmup network of 4.2M+ accounts. Built into all paid plans with unlimited email accounts. Automatic spam rescue and engagement simulation.
Never skip warmup. Launching cold campaigns from unwarmed mailboxes mimics spam bot behavior. Providers will throttle or block your sending within days. There are no shortcuts here.
Build and verify your prospect list
Sending to unverified email addresses is the fastest way to destroy your infrastructure. Bounce rates above 2% trigger enforcement from Gmail and Yahoo. A single campaign to a dirty list can blacklist domains you spent weeks warming up.
Always verify your prospect list before loading it into your sending tool. Verification confirms that each email address exists, is deliverable, and won't bounce. This is non-negotiable.
Why verify with Mailsfinder?
Mailsfinder combines email finding and verification in a single platform. You can search for prospect emails, bulk verify your existing lists, and export only deliverable contacts.
Verification accuracy
Bounce rate guarantee
Per email verified
Bulk email finder
Upload a CSV of companies or names. Mailsfinder finds verified email addresses at scale.
Real-time verification
Every email is checked against live mail servers. Only deliverable addresses pass through.
API access
Integrate verification into your workflow with n8n, Make.com, or direct API calls.
Clean export
Export only verified, deliverable contacts. Load directly into your sending tool.
Upload or search
Import your prospect list via CSV or use the email finder to build one from scratch.
Mailsfinder verifies
Real-time SMTP checks ping each recipient's mail server. Invalid, risky, and catch-all addresses are flagged.
Export clean list
Download only "Safe" and "Deliverable" contacts. Load them into Plusvibe or Instantly.
Exclusive Bonus
Join my Inner Circle, get free access to Mailsfinder (500K credits)
Get everything you need to launch and scale cold outreach. My Inner Circle members get 500K Mailsfinder credits included with their membership, plus the full outbound playbook library.
$249 one-time · No recurring fees
Set up your sending tool
Your sending tool connects all your warmed mailboxes, manages inbox rotation automatically, and handles campaign sequencing. The two tools we recommend are Plusvibe and Instantly. Both support unlimited email accounts, built-in warmup, and automatic inbox rotation.
Inbox rotation distributes your sending across multiple accounts. Instead of sending 200 emails from one mailbox (which triggers spam filters), your tool sends 40 each from 5 different accounts. Every email in a sequence can come from a different mailbox.
Key settings to configure
| Setting | Recommended |
|---|---|
| Daily limit per mailbox | 30-50 emails |
| Time between emails | 3-5 minutes |
| Inbox rotation | Enabled (round-robin) |
| Tracking domain | Custom domain |
| Open tracking | Off |
| Warmup | Always on |
Plusvibe
From $37/month · 25,000 emails/month
- check Unlimited inboxes with private warmup pool
- check Auto-SPINTAX for natural email variations
- check ESP matching (provider-aware IP rotation)
- check AI enrichment from 80+ data sources
- check Unified inbox for managing replies
Instantly
From $37/month · 5,000 emails/month
- check Unlimited email accounts on all plans
- check 4.2M+ account warmup network built-in
- check Automatic inbox rotation
- check A/Z testing for subject lines and copy
- check AI reply labels and Unibox
Monitor deliverability
Cold email infrastructure is not set-and-forget. You need to monitor key metrics weekly and take action when numbers drift outside healthy ranges. Catching issues early prevents domain burns.
Bounce Rate
<1%Critical: >2% triggers enforcement
Reply Rate
3-8%Warning: <1% = targeting issue
Spam Rate
<0.1%Critical: >0.3% = rejection
Inbox Rate
>90%Warning: <70% = infra issue
Weekly maintenance checklist
When to rotate domains: Proactively rotate every 3-6 months. Rotate sooner if bounce rates exceed 2%, spam complaints rise above 0.1%, or Google Postmaster shows "Bad" reputation for 2+ consecutive weeks. Treat secondary domains as consumable assets.
10 mistakes that kill your deliverability
Sending from your primary domain
If cold outreach triggers complaints, it damages deliverability for invoices, client comms, and support emails too.
Missing SPF, DKIM, or DMARC records
Emails without proper authentication are rejected outright by Gmail, Yahoo, and Microsoft in 2026. Not spam-filtered. Rejected.
Skipping warmup or ramping too fast
Sudden volume spikes from new domains mimic spam bot behavior. Never increase daily volume by more than 20% in a single day.
Sending to unverified email lists
High bounce rates (above 2%) trigger provider enforcement. Always verify your list before sending. Verify with Mailsfinder.
No unsubscribe link
Without an unsubscribe option, recipients mark your email as spam instead. This destroys sender reputation 10x faster.
Too many links and images in cold emails
Keep a 95/5 text-to-image ratio. Limit to one primary link per email. Complex HTML formatting gets flagged as marketing spam.
Using open tracking pixels
Tracking pixels are detected by modern spam filters. Turn off open tracking in your cold email tool. Measure success by reply rate instead.
Inconsistent sending patterns
Sending 200 on Monday, 10 on Tuesday, and 300 on Wednesday looks automated. Maintain steady daily volume with random intervals.
Not aging new domains
Buying a domain and sending the next day is a red flag. Domain age is a reputation signal. Buy domains 2-4 weeks before you need them.
Ignoring catch-all email addresses
Catch-all domains accept all emails, inflating your delivery rate while masking real bounce issues. They can also be spam traps.