How Should You Set Up a Cold Email Domain Before the First Send?

How should you set up a cold email domain before the first send?

Use a separate sending domain that clearly belongs to your brand, authenticate it with SPF, DKIM, and DMARC, point it at your real website, and ramp volume slowly while watching spam complaints. Do all of it before the first campaign. Deliverability problems are far easier to prevent than to repair once a domain's reputation is damaged.

Outbound is a GTM system with many moving parts: targeting, enrichment, copy, sequencing, and follow-up. All of it depends on one unglamorous foundation. If your emails land in spam, nothing else matters. And the most common reason they land in spam is a sending setup that was rushed.

This tutorial covers the setup I run before any outbound program goes live. It is written for a B2B team starting outbound for the first time, or restarting after a poor first attempt.

Why use a separate domain for cold email?

A separate domain protects your main domain's reputation. Cold outreach carries more risk of spam complaints than email to people who asked to hear from you. If something goes wrong, you want the damage contained to the outbound domain, not spread to the domain that sends invoices, product emails, and replies to customers.

Choose a domain that is clearly yours, such as a close variation of your brand name. Recipients should recognize who is writing, and the domain should not look like an attempt to hide or impersonate anyone. Point it at your main website, so anyone who checks lands somewhere real.

Register it early. A brand-new domain sending email immediately looks suspicious. Giving it some age and a working website before sending helps. I cover related checks in what to check before you point a domain at a new site.

What authentication does Gmail require?

Gmail's sender guidelines require every sender to "set up SPF or DKIM email authentication for your sending domains." Higher-volume senders must also "set up DMARC email authentication for your sending domain." In practice, set up all three on any outbound domain, whatever your volume, because they are cheap and expected.

SPF lists the servers allowed to send for your domain. DKIM adds a signature that proves the message was not altered and really came from your domain. DMARC tells receiving servers what to do when a message fails those checks and gives you reports on who is sending as your domain.

Google's guidelines also ask all senders to "use a TLS connection for transmitting email" and to ensure sending domains or IPs have valid forward and reverse DNS records. Most mainstream email providers handle those parts for you, but check your provider's documentation to confirm.

What spam rate should you stay under?

Google's guidance is to "keep spam rates reported in Postmaster Tools below 0.10% and avoid ever reaching a spam rate of 0.30% or higher." That is a very low tolerance. A small number of annoyed recipients marking your email as spam can push a new domain over the line quickly.

Set up Google Postmaster Tools for your sending domain before you start, so you can watch the spam rate it reports. Without it, you are guessing about how Gmail sees your mail.

The most reliable way to keep complaints low is relevance. Emails to people who clearly fit your ideal customer profile, about a problem they plausibly have, rarely get marked as spam. Emails sprayed at a broad list do. Targeting is a deliverability tool, which is why I put so much weight on separating useful buying signals from noise.

How should you warm up a new sending domain?

Start with low volume and increase it gradually over several weeks, watching bounce and spam rates at every step. Begin with emails to people likely to engage, such as warm contacts or recent inbound leads, before moving to cold prospects. If complaint or bounce rates rise, pause and slow down.

There is no universal schedule that works for every domain, so be suspicious of anyone promising one. The principle is simple. Inbox providers learn to trust a domain by seeing consistent, wanted mail over time. Sudden spikes from a new domain look like spam behavior.

Spread volume across a few mailboxes rather than pushing everything through one. That keeps each mailbox's daily volume modest and makes the overall pattern look more like normal business email.

How do you keep bounce rates low?

Verify every address before it enters a sequence, and remove anything that comes back invalid or risky. Bounces tell inbox providers that you are mailing a list you do not know well. A few hard bounces on a new domain can do lasting harm, so treat verification as mandatory, not optional.

Verification belongs inside your enrichment flow. If you use a waterfall of data providers, set a strict threshold for email results, because a wrong address costs more than a missing one. I explained that trade-off in how to order an enrichment waterfall.

Also clean your list over time. People change jobs, and addresses that were valid three months ago may now bounce. Re-verify before reusing older lists.

What should every cold email include?

Every cold email should clearly identify who is sending it, include a real business address where required, and give the recipient a simple way to opt out. Honor opt-outs quickly and permanently. Rules differ by country, so check the requirements that apply to the regions you sell into before you send.

Gmail's guidelines say marketing and subscribed messages from high-volume senders "must support one-click unsubscribe." Even if your volume is lower, a clear opt-out line in plain text helps. People who want out will use it instead of the spam button, which protects your domain.

Keep the emails plain. Heavy images, many links, and tracking pixels add risk without adding much value in early outreach. A short, specific, plain-text message reads like a real person wrote it, because one did.

How do you monitor the domain after launch?

Watch spam rate in Postmaster Tools, bounce rate in your sending tool, and reply rate by sequence every week. Read your DMARC reports to catch anyone sending as your domain without permission. If any metric moves the wrong way, slow down, fix the cause, and only then resume normal volume.

Assign one owner for deliverability. When it is everyone's job, nobody notices the slow slide until replies have already dropped.

Keep a simple log of changes: new mailboxes, new sequences, list sources, and volume changes. When something goes wrong, the log tells you what changed just before it.

What should you do next?

Register a clearly branded sending domain, point it at your website, and set up SPF, DKIM, and DMARC before sending anything. Connect Google Postmaster Tools, verify every address, warm up gradually with likely responders, include a clear opt-out, and monitor spam, bounce, and reply rates weekly.

Treat this setup as part of your go-to-market system, not a technical side task. The best targeting and copy in the world cannot help an email nobody sees.

If you want help setting up outbound infrastructure, from domains and authentication to enrichment and sequencing, this is core GTM engineering work for me. Reach out and let's chat.