Cold email infrastructure is the system of domains, mailboxes, authentication records, and warm-up processes that determines whether your cold emails land in the inbox or the spam folder. It's the part of cold outreach nobody wants to think about — and it's the single biggest reason most cold email campaigns fail before a word of copy is ever read.

I'm David Campbell, founder of Nerd Stack. We run done-for-you cold email systems for B2B clients, and the most common pattern we see is a business that did everything right on the copy and targeting — and burned their primary domain's reputation because the infrastructure underneath was wrong. This guide is the complete infrastructure setup we use: how many domains and mailboxes you actually need, how to configure authentication, how to warm up, and how to keep your sender reputation healthy over time.

By the end you'll understand the entire infrastructure layer well enough to either build it correctly yourself or know exactly what you're paying for if you outsource it.

What Is Cold Email Infrastructure (And Why Your Main Domain Should Never Touch It)

Cold email infrastructure is everything that sits beneath your campaigns: the sending domains, the individual mailboxes on those domains, the DNS authentication records that prove you are who you say you are, the warm-up process that builds sender reputation, and the ongoing monitoring that keeps it healthy.

The first and most important rule: never send cold email from your primary business domain. If your company operates on acmecorp.com — the domain your real email, your website, and your client communication live on — cold email from that domain risks the reputation of everything. One spam-trap hit or a run of spam complaints can land your primary domain on a blocklist, and suddenly your invoices and client replies are going to spam too. That is an unrecoverable-grade mistake for most businesses.

Instead, cold email runs on dedicated sending domains — separate domains registered specifically for outreach, isolated from your primary domain so that whatever happens to their reputation never touches your core business email.

Domains: How Many You Need and How to Structure Them

The number of sending domains you need scales with your sending volume. Each domain can only safely carry so much daily volume before its reputation degrades, so volume is distributed across multiple domains.

Per Instantly's cold email infrastructure guidance, a reasonable structure looks like:

  • Getting started (low volume): 2-5 sending domains
  • Scaling: 20-40 sending domains for high-volume operations

How to structure them:

  • Buy domains that resemble your brand but are clearly identifiable as outreach domains. If your primary is acmecorp.com, register getacmecorp.com, tryacmecorp.com, acmecorp.io, acmecorp.co, etc. They should connect to your brand without being your primary domain.
  • Set up a redirect from each sending domain to your real website, so anyone who manually types the domain lands somewhere legitimate.
  • Register through a reputable registrar and keep WHOIS information accurate — sloppy registration data is a low-grade spam signal.
  • Cost is minimal — sending domains run roughly $10-15/year each. Domain cost is never the bottleneck; reputation management is.

Mailboxes: How Many Per Domain and Which Provider

Each sending domain hosts a small number of individual mailboxes (the actual email addresses you send from). The critical constraint: keep it to 2-3 mailboxes per domain. Scaledmail's infrastructure research recommends this cap specifically to isolate risk — if one domain's reputation degrades, you've only lost 2-3 mailboxes, not your entire sending capacity.

Mailbox math: if a fully warmed mailbox safely sends 40-50 emails per day (Instantly), and you want to send 500 cold emails per day, you need roughly 10-13 mailboxes — which means 4-7 sending domains. Plan your domain and mailbox count backward from your target daily volume.

Provider Options

  • Google Workspace — the highest-deliverability option for most use cases. ~$6-7/mailbox/month. Real Gmail infrastructure, strong inbox placement, well-understood by every cold email tool.
  • Microsoft 365 / Outlook — workable but with a meaningful caveat: Saleshandy's data shows Outlook inbox placement lagging at around 75.6% versus an 87.6% industry average. If your prospects are heavily on Outlook/Microsoft, you need Microsoft mailboxes to reach them — but expect lower placement.
  • Dedicated cold email infrastructure providers — services that provision mailboxes specifically for outreach. Convenient, but vet them: shared infrastructure carries the reputation of everyone else on it.

For most B2B cold email, a fleet of Google Workspace mailboxes across multiple sending domains is the reliable default.

Authentication: SPF, DKIM, DMARC, and PTR Records

Email authentication is a set of DNS records that prove your emails genuinely come from your domain and haven't been spoofed. As of the Google and Yahoo bulk sender requirements, these are not optional — they are a hard requirement for inbox placement. Per Google's official email sender guidelines, bulk senders must have SPF, DKIM, DMARC, valid PTR records, and TLS, and must keep their spam rate low.

Missing authentication can cut deliverability by up to 30%. Here's what each record does:

  • SPF (Sender Policy Framework) — a DNS TXT record listing which mail servers are authorized to send email for your domain. Receiving servers check it to confirm the sending server is legitimate.
  • DKIM (DomainKeys Identified Mail) — a cryptographic signature attached to every outgoing email. The receiving server verifies the signature against a public key in your DNS, proving the message wasn't altered in transit.
  • DMARC (Domain-based Message Authentication, Reporting & Conformance) — a policy record that tells receiving servers what to do with email that fails SPF or DKIM. Start with a monitoring policy (p=none) for the first few weeks, then tighten to p=quarantine.
  • PTR record (reverse DNS) — maps your sending IP back to a hostname. Google explicitly requires valid PTR records for bulk senders.

After configuring authentication, verify it before sending anything. Tools like mail-tester.com give you a sender score — you want 9/10 or higher. At Nerd Stack, SPF, DKIM, and DMARC configuration is standard setup on every cold email client engagement, verified before a single cold email goes out. It is not a step you skip or rush.

Domain Warm-Up: The 2-4 Week Ramp

A brand-new sending domain has zero reputation. Send real cold email volume from it on day one and spam filters will flag it immediately. Warm-up is the process of gradually building a positive sending reputation before you send real campaigns.

How warm-up works: warm-up tools (built into Instantly, Smartlead, and most modern cold email platforms) automatically send and receive emails between your mailboxes and a network of other warm-up accounts. Those accounts open your emails, mark them as important, and move them from spam to inbox — teaching inbox providers that your domain sends wanted mail.

The ramp, per Instantly's guidance:

  • Duration: 2-4 weeks of warm-up before sending real cold email
  • Start low: a handful of warm-up emails per mailbox per day
  • Ramp gradually: increase volume every few days
  • Target steady-state: 40-50 emails per day per fully warmed mailbox for cold outreach
  • Keep warm-up running in the background even after launch — it maintains reputation while you send real campaigns

This is the step most DIY cold emailers skip because it's "just waiting." It's not waiting — it's the entire foundation. Skipping warm-up is the single most common reason a technically correct setup still lands in spam.

Sending Rotation, Monitoring, and Reputation Maintenance

Infrastructure is not "set up once and forget." Once you're live, the work shifts to maintenance:

  • Sending rotation: your cold email tool should distribute sends across all your mailboxes so no single mailbox or domain carries disproportionate volume. This happens automatically in tools like Instantly and Smartlead once your mailboxes are connected.
  • Spam rate monitoring: Google's threshold is a 0.3% spam complaint rate in Postmaster Tools — and you really want to stay under 0.1%. Cross that line and inbox placement collapses. Monitor it weekly.
  • Bounce rate: keep it under 2%. High bounce rates signal a bad list and damage domain reputation. Saleshandy found that 49% of bounces come from invalid addresses and 23% from domain reputation issues — verify every list before sending.
  • Inbox placement testing: periodically run seed-list tests to confirm your emails are actually landing in the inbox, not just "sent." Industry average inbox placement is 87.6%; below that and something in your infrastructure needs attention.
  • Domain rotation over time: domains age and reputations shift. High-volume operations cycle in fresh warmed domains and rest older ones.

For our cold email clients, this monitoring is built into the weekly reporting — spam rate, bounce rate, inbox placement, and reputation signals reviewed every week so problems get caught before they compound.

The Real Cost: Time, Money, and Ongoing Management

Here's the honest accounting of what cold email infrastructure actually requires, so you can make a clear build-vs-buy decision.

To build it yourself, for a modest 500 emails/day operation:

  • 5-7 sending domains (~$70-105/year)
  • 10-13 mailboxes on Google Workspace (~$780-1,100/year)
  • A cold email platform with warm-up (Instantly, Smartlead, etc. — ~$30-100/month)
  • 2-4 weeks of setup and warm-up before you can send anything real
  • Ongoing weekly monitoring of spam rate, bounce rate, and inbox placement
  • The technical comfort to configure DNS records correctly across every domain

None of it is impossibly hard. But it is a real technical project with a multi-week lead time and a permanent maintenance tail — and getting any single piece wrong (a malformed SPF record, skipped warm-up, too many mailboxes per domain) quietly tanks the whole thing.

Build It Yourself vs. Done-for-You

If you have the technical comfort and the time to manage it weekly, building your own cold email infrastructure is entirely doable — this guide is the blueprint. Buy the domains, provision the mailboxes, configure authentication carefully, warm up properly, and monitor reputation religiously.

If you'd rather have a predictable outbound lead channel without becoming a part-time deliverability engineer, that's exactly what our Cold Email Outbound service exists for. We handle the entire infrastructure layer — dedicated domain setup, mailbox provisioning, SPF/DKIM/DMARC configuration, the full warm-up ramp, sending rotation, and weekly reputation monitoring — plus the ICP-targeted list building and sequence copywriting on top. You get the leads; we run the machine underneath.

Either way, the infrastructure has to be right. It's the part of cold email that's invisible when it works and catastrophic when it doesn't.

Frequently Asked Questions

Can I send cold email from my main business domain?

No. Sending cold email from your primary domain risks the reputation of all your business email — invoices, client replies, transactional messages. A spam-trap hit or a run of complaints can blocklist your main domain. Always use dedicated sending domains that are isolated from your primary domain.

How many domains and mailboxes do I need for cold email?

It scales with volume. A fully warmed mailbox safely sends 40-50 emails per day, and you should keep 2-3 mailboxes per domain. For 500 emails/day, that's roughly 10-13 mailboxes across 4-7 sending domains. For getting started, 2-5 domains is reasonable; high-volume operations run 20-40.

How long does cold email warm-up take?

2-4 weeks before you should send real cold email from a new domain. Warm-up starts with a handful of emails per mailbox per day and ramps gradually. Most modern cold email platforms (Instantly, Smartlead) have warm-up built in, and you should keep it running in the background even after launch to maintain reputation.

What happens if I skip SPF, DKIM, and DMARC?

Your deliverability can drop by up to 30%, and under the current Google and Yahoo bulk sender requirements, missing authentication means your emails may not be accepted at all. SPF, DKIM, DMARC, and valid PTR records are hard requirements for inbox placement — not optional optimizations.

Why are my cold emails still going to spam even though I set everything up?

The most common causes after a technically correct setup: warm-up was skipped or too short, too many mailboxes per domain, an unverified list driving high bounce rates, spam-trigger language in the copy, or a spam complaint rate creeping over 0.3%. Cold email deliverability is an ongoing maintenance discipline, not a one-time setup.

How much does cold email infrastructure cost?

For a 500 emails/day operation built yourself: roughly $70-105/year in domains, $780-1,100/year in Google Workspace mailboxes, and $30-100/month for a sending platform — plus 2-4 weeks of setup time and ongoing weekly monitoring. The cash cost is modest; the real cost is the technical setup and the permanent maintenance tail.

Should I use Google Workspace or Outlook for cold email?

Google Workspace is the higher-deliverability default for most B2B cold email — industry inbox placement averages 87.6%, while Outlook lags around 75.6%. However, if your prospects are heavily on Microsoft/Outlook, you need Microsoft mailboxes to reach their inboxes reliably, even at lower placement rates. Many operations run both.

Bottom Line

Cold email infrastructure is the foundation everything else sits on. The best ICP, the sharpest copy, and the smartest sequence all fail if the emails never reach the inbox — and whether they reach the inbox is decided by domains, mailboxes, authentication, and warm-up, not by how good your message is.

The setup isn't impossibly complex, but it is unforgiving: a multi-week lead time, a dozen-plus moving parts, and a permanent maintenance requirement where any single mistake quietly sinks the whole campaign. Get it right and cold email becomes a predictable, scalable lead channel. Get it wrong and you've burned domains and budget with nothing to show for it.

Want a Cold Email System Without Building the Infrastructure?

If you want a predictable B2B outbound lead channel but don't want to become a part-time deliverability engineer, that's exactly what we do at Nerd Stack. Our Cold Email Outbound service handles the complete infrastructure layer — domains, mailboxes, SPF/DKIM/DMARC, warm-up, sending rotation, and weekly reputation monitoring — plus ICP-targeted list building and sequence copywriting. Book a free call and we'll walk through whether cold email is a fit for your business.

For the strategy layer on top of the infrastructure, see our complete B2B cold email guide and our walkthrough on using Claude Code to personalize cold emails at scale.

Sources: Instantly — Cold Email Infrastructure Setup; Instantly — Cold Email Benchmark Report; Saleshandy — Cold Email Statistics; Google — Email Sender Guidelines; GMass — Gmail Bulk Sender Guidelines; Woodpecker — How to Set Up a Domain and Mailbox for Cold Outreach; Scaledmail — How Many Inboxes Per Domain.