Every cold email sending domain needs the same 12-step setup before it sends a single real campaign email. Register a secondary domain, add mailboxes, publish SPF, DKIM, and DMARC, add a redirect and a custom tracking domain, enroll in Postmaster Tools, then warm up for weeks. Skip the warm-up or ru
Every cold email sending domain needs the same 12-step setup before it sends a single real campaign email. Register a secondary domain, add mailboxes, publish SPF, DKIM, and DMARC, add a redirect and a custom tracking domain, enroll in Postmaster Tools, then warm up for weeks. Skip the warm-up or run it for less than 14 days and you have the single most common cause of cold programs failing in week 4 to 8.
This is a focused domain checklist, narrower than a full cold email infrastructure guide: it is the exact per-domain sequence, in order, with what each step should look like when done right.
A cold email domain setup is the configuration completed on a fresh secondary sending domain before it runs campaigns: domain registration, mailbox creation, SPF, DKIM, and DMARC authentication, a redirect to the primary site, a custom tracking domain, enrollment in provider monitoring tools, and a multi-week warm-up. The order matters, because authentication must precede monitoring and warm-up must come last.
Have these ready so you are not stopping mid-setup:
The setup below runs in one sitting per domain. The warm-up that follows runs for weeks, so start the setup for every domain in your planned fleet at once, then warm them in parallel.
1. Register a secondary domain. Not your primary. A .com, close to your brand, no numbers, minimal hyphens. See secondary domains for cold email. Done right: a clean, brand-adjacent .com registered for at least 12 months.
2. Let it rest. Give it a few days to a week before sending anything. Done right: domain age of at least several days when warm-up starts.
3. Add a 301 redirect to your primary site. Five minutes in the registrar. Done right: visiting the domain lands on your real homepage.
4. Create 2 to 3 mailboxes with human names. firstname@, not sales@ or info@. See how many email accounts per domain. Done right: 2 to 3 mailboxes, real names, display photos, a short signature.
5. Publish an SPF record. One record, ending in ~all or -all. See what is an SPF record. Done right: a single SPF TXT record that passes validation.
6. Enable DKIM signing. With your sending domain's own selector. See what is DKIM. Done right: outgoing mail is DKIM-signed and verifies.
7. Publish DMARC at p=none. Never p=reject on day one, which rejects legitimate transactional mail. See what is DMARC. Done right: a _dmarc record at p=none with a reporting address.
8. Verify all three pass. Send a test to a checker. See spam score checker. Done right: SPF, DKIM, and DMARC all green, alignment confirmed, score 9 or 10.
9. Set up a custom tracking domain. A CNAME from a subdomain of this domain to your platform's tracker. See custom tracking domain setup. Done right: tracked links show your subdomain, CNAME resolves.
10. Connect mailboxes to your sending platform and enable one-click unsubscribe. See list-unsubscribe header. Done right: mailboxes connected, both List-Unsubscribe headers present in a test send.
11. Enroll the domain in Google Postmaster Tools. And SNDS if you run a dedicated IP. See Google Postmaster Tools guide. Done right: domain verified, waiting on volume for data.
12. Warm up for 3 to 8 weeks. 30-day floor for a brand-new domain. See how long to warm up an email domain and best email warm up tools. Done right: seed placement 90%-plus, spam rate under 0.1%, bounce under 2%, real replies coming.
Three ordering rules save you from redoing work.
Authentication before monitoring. If you add the domain to Postmaster Tools before SPF and DKIM are live, all you see is authentication failures, and you cannot tell a real problem from an incomplete setup.
Redirect and tracking domain before warm-up. Warm-up sends real messages, and you want those messages carrying your final link structure and resolving to your real site from day one, not mid-ramp.
Warm-up last, and never skipped. Every other step is configuration you do once. Warm-up is the multi-week process that makes the configuration matter.
Plan for one domain per 2 to 3 mailboxes, and one mailbox per 40 to 50 cold emails a day. For a team sending 500 cold emails a day, that is roughly 10 to 12 mailboxes across 4 to 6 domains.
Run the full 12 steps on each domain. Then use inbox rotation to spread campaigns across the fleet and email throttling to pace each mailbox. Keep one or two warmed spare domains idle so a burned domain is a swap, not a crisis.
Before step 12, run one combined check that catches most setup errors in a single test send.
Send a real-looking email from one of the new mailboxes to a personal Gmail and a personal Outlook address you control, then to mail-tester. Confirm: the mail-tester score is 9 or 10, SPF, DKIM, and DMARC all show as passing, the List-Unsubscribe header appears with an HTTPS URL and the one-click post header, every link in the body is on your track. subdomain, and the message landed in the primary inbox in both Gmail and Outlook. Then visit the bare domain in a browser and confirm it redirects to your primary site.
If any of those fail, fix it now. Starting warm-up on a domain with a broken DKIM record or an unverified tracking domain means weeks of warm-up building the wrong foundation.
The Pre-Send Gate: a domain does not send one real campaign email until all 12 checklist items are green. Each item you skip to save time is a week-4 failure you are scheduling for later.
The gate works because cold email failures are almost never mysterious. When a program dies in week 4, the post-mortem finds a skipped step: DMARC was at p=reject, or warm-up ran 8 days instead of 30, or the tracking domain was never verified so links rode the shared tracker. None of these show up on day one. They show up when volume ramps and the missing piece finally matters.
Running the full checklist per domain, in order, front-loads all of that. It costs an extra hour or two per domain during setup and saves a multi-week domain rebuild later. The quotable version: "Every cold program that failed in week 4 skipped a step in week 1."
Keep the checklist as a literal document and tick it off for every new domain, including the ones you add under deadline pressure.
A perfectly configured domain still fails if the first campaign goes to a bad list. The 12 steps protect your infrastructure; the list determines whether that infrastructure gets used or burned.
InboundLabs is a sales intelligence platform built on a database of 280M verified B2B contacts with 98% email deliverability on verified contacts. It layers buyer intent signals on firmographic data and lets you filter by industry, headcount, region, and title, so the first real campaign off a freshly set up domain goes to contacts that are valid and relevant. Monthly plans, no annual lock-in. Free to start, no credit card required.
See how InboundLabs finds verified contacts instantly → inboundlabs.app
The cold email domain setup checklist is 12 steps in a fixed order: register a secondary domain, rest it, redirect it, add mailboxes with human names, publish SPF, DKIM, and DMARC at p=none, verify they pass, set up a custom tracking domain, connect mailboxes and enable one-click unsubscribe, enroll in Postmaster Tools, and warm up for 3 to 8 weeks with a 30-day floor. Authentication comes before monitoring, warm-up comes last, and no domain sends a real campaign until every box is checked. Skip a step in week 1 and you pay for it in week 4.
A secondary domain separate from your brand domain, 2 to 3 mailboxes with human names, SPF, DKIM, and DMARC records, a 301 redirect to your primary site, a custom tracking domain, enrollment in Google Postmaster Tools, and a 3 to 8 week warm-up. Complete them in that order, because authentication must precede monitoring and warm-up must come last.
The configuration takes an hour or two per domain. The warm-up that follows takes 3 to 8 weeks, with 30 days as the floor for a brand-new domain. So a domain is set up in an afternoon but not ready to run real campaigns for about a month.
Start at p=none. Setting p=reject on day one rejects legitimate mail, including transactional messages, before you have monitoring data to catch alignment problems. Move to p=quarantine later once you have confirmed all your legitimate sources pass. Many cold senders stay at p=none or p=quarantine indefinitely.
One domain per 2 to 3 mailboxes, and one mailbox per 40 to 50 cold emails a day. For 500 cold emails a day, that is roughly 10 to 12 mailboxes across 4 to 6 domains. Scale by adding domains and mailboxes together, never by raising volume per mailbox.
Only if it already sends normal business mail with a positive history. A domain registered months ago but never used has no sending reputation and still needs a full warm-up. An established domain with real sending history needs only a short 1 to 2 week ramp before adding cold volume.
Skipping or shortening warm-up. Running less than 14 days of warm-up, or none at all, is the single most common reason cold email programs fail in weeks 4 to 8. The domain sends fine at first, then placement collapses once volume ramps past what the unbuilt reputation can support.
LSI keywords: cold email domain setup, secondary domain, SPF DKIM DMARC, DMARC p=none, custom tracking domain, domain warm-up, Google Postmaster Tools, one-click unsubscribe, mailbox per domain, 301 redirect, sending fleet, deliverability checklist
The best email warm up tool depends on one number: how many mailboxes you run. At 3 mailboxes, per-inbox pricing is fine and any tool works.
The best setup for cold email is not a traditional email service provider. It is real Google Workspace or Microsoft 365 mailboxes, on secondary domains, connected to a sending platform like Instantly, Smartlead, or lemlist.
A custom tracking domain is a subdomain of your sending domain, like track.get-yourco.com, that you point with a CNAME record to your sending platform's tracking endpoint. Once it is live, every tracked open pixel and click link in your emails uses your subdomain instead of the platform's shared...
Most senders should use a shared IP. A dedicated IP only pays off above roughly 100,000 emails a month sent consistently, with the discipline to warm it and keep it warm.
No commitment. No credit card. Just 50 free verified contact lookups.