How to Set Up a Cold Email Domain: Step-by-Step Guide

The Sendvanta Team · September 16, 2026 · 11 min read

Most people who search for cold email domain setup have already done the first step: they bought a lookalike domain. Then they connected it to a sending tool the same afternoon, uploaded 2,000 leads, and watched reply rates sit at zero while bounces climbed. The domain wasn't the problem. The build order was.

A cold email domain is infrastructure, and infrastructure has a sequence: register, make it look real, authenticate, populate, age, test, then send. Skip a step and you don't find out immediately — you find out two weeks later, by which point the domain is burned and you're starting over with a new one. This guide walks the whole build in order, with the timings, records, and specific settings that actually change outcomes.

Step 1: Work out how many domains you actually need

Start from volume, not from ambition. A healthy mailbox on a warmed, properly authenticated domain sends roughly 30–50 cold emails a day. Two to three mailboxes per domain is the practical ceiling — beyond that, a single mailbox collecting spam complaints drags the whole domain's reputation down with it, and you lose everything at once instead of one-third of it.

So the arithmetic is simple. Three mailboxes at 40 sends each is about 120 emails a day per domain. If you need 400 sends a day, plan on three or four domains. If you're a founder emailing 50 well-researched prospects a day, one domain with two mailboxes is genuinely enough, and building more is wasted money and wasted warm-up time.

Whatever the number, do not run cold outreach from your primary company domain. We covered the reasoning in Should You Use Your Main Domain for Cold Email?, but the short version is that a spam-folder reputation on your main domain also breaks your invoices, password resets, contract signatures, and support replies. The blast radius is the entire business, not one campaign.

Step 2: Pick names that look like you, not like a spammer

The goal is a domain a prospect recognizes as yours within half a second of glancing at the From line. Three patterns work reliably: a prefix (getacme.com, tryacme.com, useacme.com), a suffix (acmehq.com, acmeapp.com, acme.team), or an alternate TLD if you already own the .com (acme.co, acme.io, acme.net).

What to avoid is equally concrete. Skip hyphens and digits — they read as disposable. Skip deliberate misspellings of your real brand, which look like phishing to both humans and filters. And skip the cheap TLDs. Registries like .xyz, .top, .click, .icu, and .buzz carry disproportionate abuse volume, and several filtering vendors weight domains from those registries accordingly. Saving nine dollars on registration is not worth beginning life with a reputation deficit you didn't earn. Budget $10–15 a year for a .com through Cloudflare, Namecheap, or Porkbun.

A useful gut check: buy domains you'd be comfortable printing on a business card. If the name looks like a throwaway, recipients will treat the email like one.

Step 3: Make the domain look like a real business

Before you touch a single mail record, do the unglamorous part. Point the root domain somewhere. A 301 redirect to your main website takes two minutes and satisfies the reflex both prospects and filters have — does this domain resolve to something that exists?

Better than a redirect is a single page: your logo, one sentence describing what the company does, and a contact link. Filters increasingly check whether a sending domain has any web presence at all, and a parked registrar page full of ads is measurably worse than nothing. Add an HTTPS certificate while you're there; most hosts issue one free.

Turn on WHOIS privacy, which is standard at every major registrar now. Then check the expiry settings. A domain set to lapse in eleven months with auto-renew disabled will break every open reply thread you have at exactly the wrong moment, and re-establishing a lapsed domain's reputation is harder than starting fresh.

Step 4: Connect a mailbox provider and publish your DNS records

Choose one of three: Google Workspace, Microsoft 365, or a reputable SMTP host. Google and Microsoft run roughly $6–8 per user per month and give you the strongest inbox-placement baseline at Gmail and Outlook respectively, which is where most B2B recipients live. Whichever you pick, the DNS set is essentially the same five records.

RecordTypical valueWhy it matters
MXProvided by your mailbox hostRoutes inbound mail. Without it, replies disappear and some filters treat the domain as send-only, which is a spam signal.
SPF (TXT)v=spf1 include:_spf.google.com -allAuthorizes sending servers. Exactly one SPF record per domain, staying under 10 DNS lookups.
DKIM (TXT)2048-bit key from your providerCryptographically signs outgoing mail. Google does not enable it by default — you have to generate and publish it yourself.
DMARC (TXT)v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.comTells receivers how to handle authentication failures and sends you aggregate reports. Start permissive.
Tracking CNAMElink.yourdomain.com → your tool's hostKeeps click tracking on your own hostname rather than a shared domain that thousands of other senders have already gotten blocklisted.

Two mistakes account for most broken setups. The first is publishing two SPF records because a second sending service was added later — receivers treat that as a permanent error, so merge the includes into one record instead. The second is jumping straight to DMARC p=reject before you know what else sends as that domain. Run p=none for two to four weeks, actually read the aggregate reports, discover the invoicing tool or CRM nobody told you about, then tighten to p=quarantine.

If you want each record explained properly along with the common failure modes, SPF, DKIM, and DMARC for Cold Email goes deeper than this section can.

One final DNS decision: do not enable catch-all. A catch-all address accepts every typo and every scraped junk address, which destroys your ability to detect bad list data through bounces and makes the domain a magnet for spam traps.

Step 5: Create mailboxes that belong to actual humans

Two to three mailboxes per domain, each attached to a real person on your team who can answer a reply. The configuration details here are small individually and meaningful in aggregate.

Use first.last@ or first@ addressing, never info@, sales@, hello@, or noreply@ for outbound — role addresses get filtered harder and nobody replies to them anyway. Set the display name to the person's full name rather than "Acme Sales Team." Upload a real profile photo, which renders next to your message in Gmail and reliably nudges reply rates. Write a plain-text signature containing name, title, company, website, and a physical mailing address, with no banner images, no logo graphics, and no tracking pixels. And make sure someone has inbox access on day one, because the fastest way to torch a new domain is to leave replies unanswered for a week.

If you plan to rotate sending across several mailboxes as you scale, get the naming convention consistent now — mailbox rotation explains how that plays out once you're running multiple domains.

Step 6: Age and warm up for three to four weeks

A brand-new domain with flawless DNS is still a complete stranger. Receiving systems have no sending history to weigh it against, so they default to suspicion. Warm-up creates that history: real messages, real opens, real replies, real folder moves, ramping gradually from a handful a day to your target volume.

A workable schedule for a single mailbox looks like this. Days 1–7: three to eight warm-up messages a day, zero cold sends. Days 8–14: ten to twenty a day, still zero cold sends. Days 15–21: twenty-five to thirty-five a day, and you can optionally begin five to ten cold emails to your warmest, most relevant segment. Days 22–30: forty to fifty total per day, with the cold portion climbing toward twenty or thirty.

The quality of warm-up traffic matters more than the count. Messages that live inside your actual workspace, labeled and auditable, build a more defensible history than volume bounced through an anonymous reciprocal exchange pool. Google and Microsoft have both gotten noticeably better at recognizing warm-up networks, and participation in an obvious one is not a neutral signal.

Step 7: Test the copy and the placement before the first campaign

Two checks, both cheap, both done before a single real prospect receives anything. First, spam-score your actual sequence copy with SpamAssassin. Anything above roughly 3.0 needs a rewrite, and the culprit is usually a link shortener, an attachment, an all-image body, or a subject line written in the voice of a discount coupon.

Second, run a seed inbox-placement test. Send the real message to a set of seed mailboxes spanning Gmail, Outlook, and at least one corporate filter, then look at where it actually landed. Delivered and inboxed are not the same thing, and a campaign that reports 98% delivery while sitting in Promotions or Junk will quietly waste an entire list.

Verify the list too. A bounce rate above 3% on a fresh domain will stall the reputation you just spent a month building, and a new domain has no accumulated credit to spend on your bad data.

Step 8: Ramp slowly and watch the right signals

Begin at ten to twenty cold emails per mailbox per day. Hold that for a week. Then add roughly ten a day each week until you reach forty or fifty. The temptation to jump straight to full volume once the first batch gets replies is strong and consistently wrong — filters respond to the shape of a sending curve, not just its height.

Watch bounce rate, spam complaints, and above all reply rate. If replies fall while send volume rises, you are being filtered rather than ignored. Cut volume by half for a week and re-run placement testing before you touch the copy. And do not use open rate as your health metric: Apple Mail Privacy Protection and corporate security scanners inflate it badly enough that a 70% open rate can mean absolutely nothing.

What it costs, and where Sendvanta fits

A realistic single-domain build runs about $12 a year for the domain plus $6–8 per mailbox per month for Google or Microsoft. Three domains with three mailboxes each lands around $60–75 a month before software.

Sendvanta handles the parts of this build that are tedious to wire up by hand. You connect your own Gmail, Microsoft 365, or SMTP/IMAP mailboxes for free on every plan, and warm-up runs with real labeled messages inside your own workspace instead of through a shared exchange. Drafts get SpamAssassin-scored before send, seed mailboxes test genuine inbox placement, and a layered health score across mailbox, domain, DKIM, and IP slows or pauses sending automatically when risk crosses a threshold — which is precisely the check most people forget to run manually in week three.

If you'd rather skip the registrar entirely, paid plans can register a sending domain through Sendvanta for a one-time $20, and add managed mailboxes at $4 a month each. Plans are $29 (Starter), $59 (Growth), and $99 (Pro), with a free tier at $0 covering 1,000 active leads, 3,000 emails a month, and up to 10 of your own SMTP mailboxes — enough to build and warm a single domain end to end before you spend anything.

How long before a new cold email domain is safe to send from?

Three to four weeks from registration. That covers DNS propagation, DKIM signing, and a warm-up ramp that builds real sending history. You can start five to ten cold emails per mailbox around day 15 if warm-up metrics look clean, but going to full volume before week four is where most domains get burned.

Can I use a subdomain instead of buying a separate domain?

You can use something like mail.acme.com, and it inherits some of the parent domain's reputation — which cuts both ways. A subdomain that generates complaints can still drag on the root domain at some receivers. A separate domain gives you true isolation for about $12 a year, which is usually the better trade.

How many mailboxes should I put on one cold email domain?

Two to three. The constraint isn't technical, it's blast radius. If one mailbox collects complaints, the whole domain's reputation takes the hit, so spreading volume across more domains with fewer mailboxes each is safer than stacking eight mailboxes onto one.

Do I need a separate tracking domain?

Yes, if you track clicks at all. Shared tracking domains are used by thousands of senders and get blocklisted regularly. A CNAME like link.yourdomain.com pointing at your sending tool keeps the link hostname aligned with your From domain, which looks consistent to filters.

Should I set DMARC to p=reject right away?

No. Start at p=none with a reporting address, read two to four weeks of aggregate reports to identify legitimate senders you forgot about, then move to p=quarantine. Jumping straight to reject on a newly configured domain usually breaks something you didn't know was sending.

Ready to send outbound that lands?

Create your free Sendvanta workspace — no credit card required.

Start free