How to Set Up a Cold Email Domain (The Right Way)
Most teams that struggle with cold email deliverability did not ruin their campaigns by writing bad copy or targeting the wrong list. They made mistakes when setting up their domains before sending a single email. The configuration decisions you make in the first 30 minutes of domain setup determine whether your outreach lands in the inbox or disappears into spam for weeks.
This guide covers how to set up a cold email domain correctly, from buying the right domain to configuring DNS records to getting inboxes warmed and ready to send. If you are starting fresh or cleaning up a broken setup, this is the process that actually holds up at scale.
Quick Answer
Setting up a cold email domain requires five core steps: buy a separate sending domain (never use your primary business domain), configure your DNS records (SPF, DKIM, DMARC), create dedicated sending inboxes, warm those inboxes before sending any real outreach, and monitor deliverability continuously once campaigns are live.
Skip any one of these steps and you are leaving deliverability to chance.
Why You Should Never Send Cold Email From Your Primary Domain
Before getting into the setup process, this point needs to be clear: do not use your main business domain for cold email.
Your primary domain is the one your website lives on and the one you use for internal communication. If it gets flagged or blacklisted because of cold email activity, you lose email capability across your entire organization. Recovering a flagged primary domain can take weeks and there is no guarantee the reputation damage is fully reversible.
Cold email domains are purpose-built sending infrastructure. They are separate from your brand domain, cheap to provision, and expendable if something goes wrong. The standard practice for any serious outbound operation is to run outreach exclusively through these secondary sending domains.
What You Need Before You Start
- Access to a domain registrar (Google Domains, Namecheap, GoDaddy, or similar)
- A Google Workspace or Microsoft 365 account for inbox creation
- A DNS management panel for the new domain
- A warmup tool or inbox warmup capability
- A clear plan for how many inboxes you need per domain (the standard is 2-3 inboxes per domain)
Step-by-Step: How to Set Up a Cold Email Domain
Step 1: Buy a Sending Domain
Register a domain that is clearly related to your brand but distinct from your primary domain. If your main domain is companyx.com, consider options like:
Avoid domains that look spammy on their own. Generic keyword domains (like bestbizdeals.com) raise flags before you send anything. The domain should look like it belongs to a real organization.
Buy the domain through a standard registrar. Age matters for domain reputation, so register it as early as possible before you plan to start sending.
Step 2: Set Up Google Workspace or Microsoft 365
Once you own the domain, connect it to a professional email hosting provider. Google Workspace and Microsoft 365 are the two standard options for cold email infrastructure. Free email providers like Gmail personal or Yahoo are not appropriate for this and will hurt deliverability.
Peeker has a dedicated Google Workspace setup workflow that handles provisioning at scale if you are managing multiple sending domains simultaneously.
For a single domain setup, go through the standard Google Workspace admin flow, verify domain ownership via DNS, and create your sending inboxes once the workspace is live.
Step 3: Configure Your DNS Records (SPF, DKIM, DMARC)
This is the step most teams rush or skip entirely. Without correct DNS authentication, inbox providers have no reason to trust your domain and will route your emails to spam.
There are three records you must configure:
SPF (Sender Policy Framework)
SPF tells receiving mail servers which servers are authorized to send email on behalf of your domain. For Google Workspace, your SPF record looks like this:
v=spf1 include:_spf.google.com ~all
This goes into your DNS as a TXT record on the root domain.
DKIM (DomainKeys Identified Mail)
DKIM adds a cryptographic signature to your outgoing emails so receiving servers can verify the message was not tampered with in transit. In Google Workspace, navigate to Admin Console, then Apps, then Google Workspace, then Gmail, then Authenticate Email to generate your DKIM key. Add the generated TXT record to your DNS.
DMARC (Domain-based Message Authentication, Reporting, and Conformance)
DMARC builds on SPF and DKIM and tells receiving servers what to do when an email fails authentication. Start with a permissive policy and tighten it over time:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
Add this as a TXT record at _dmarc.yourdomain.com.
All three records must be correctly in place before you start warming. Use a DNS lookup tool (like MXToolbox) to verify they are resolving correctly.
Step 4: Set Up a Custom Tracking Domain (Optional but Recommended)
If you are tracking open rates or clicks in your sequences, set up a custom tracking domain that matches your sending domain. Using a generic tracking subdomain provided by your sequencer (like tracking.sequencertool.com) is a shared resource used by thousands of other senders, which can hurt your deliverability if any of them have burned reputation on that subdomain.
Create a subdomain like track.yourdomain.com or click.yourdomain.com and configure it in your sequencer settings.
Step 5: Create Sending Inboxes
Create 2-3 inboxes per domain. Going above 3 puts too much volume through a single domain and increases the risk of hitting sending limits or getting flagged.
Use realistic, professional names for your inboxes. firstname@domain.com or firstname.lastname@domain.com are standard formats. Avoid generic prefixes like info@, contact@, or support@ for cold outreach.
Step 6: Warm the Inboxes Before Sending
A brand new inbox with no sending history is invisible to inbox providers. If you start blasting cold email immediately, the spike in volume from an unknown sender is a reliable signal for spam filters.
Warming is the process of gradually increasing email sending volume from a new inbox while generating positive engagement signals (opens, replies, moves out of spam). This builds domain and inbox reputation before your real campaigns go live.
The standard warming timeline is 3-4 weeks minimum. Most warmup tools handle this automatically by sending low-volume emails between enrolled inboxes and simulating real engagement.
Do not shortcut the warmup period. It is the single most common mistake teams make when setting up new infrastructure.
Step 7: Connect to Your Sequencer and Monitor Performance
Once inboxes are warmed, connect them to your outreach sequencer (Instantly, Smartlead, or whichever tool you use). Configure sending limits in the sequencer to stay within what your inboxes can handle without reputation damage.
From this point forward, monitoring matters as much as setup. A domain that looked healthy on day one can degrade over weeks if you are sending to bad lists, hitting spam traps, or getting flagged by major inbox providers.
Where Peeker Fits
Setting up a cold email domain correctly is a one-time process. Keeping it healthy is a continuous one.
Most teams discover a burned inbox or degraded domain after the damage is already affecting their campaigns. Open rates drop, reply rates tank, and by the time anyone investigates, the sending domain has been flagged for days.
Peeker’s Deliverability Analytics monitors inbox and domain health in real time so teams are not finding out about deliverability problems after the fact. If an inbox starts showing signs of burn, Peeker’s Burn Detection catches it early, before it affects your campaign results.
For teams running multiple sending domains, Peeker handles provisioning, monitoring, and automated swaps in one system, so you are not manually tracking the health of dozens of inboxes across spreadsheets.
Common Mistakes to Avoid
Using your primary domain for sending. Covered above. Never do this.
Missing or misconfigured DNS records. Skipping DMARC or entering SPF incorrectly is one of the top reasons cold email goes to spam from day one. Verify all records before warming.
Starting campaigns before warmup is complete. Three to four weeks feels long when you want to start sending. Skipping it or shortcutting it will cost more time in the long run when domains get burned.
Too many inboxes per domain. More than 3 inboxes per domain increases your risk. Spread volume across more domains rather than stacking inboxes on a single domain.
No monitoring after launch. Domain setup is not a set-it-and-forget-it task. Deliverability changes over time based on list quality, sending patterns, and engagement rates.
Generic or spammy-looking domain names. Your domain name is part of your sender identity. Names that look fake or keyword-stuffed hurt trust before anyone even reads the subject line.
FAQ
How many domains do I need for cold email?
The answer depends on your sending volume. As a general rule, plan for one domain per 30-40 emails sent per day. If you are running high-volume outbound, you will need multiple domains with 2-3 inboxes each. Spreading volume across more domains reduces the risk that any single domain gets burned and disrupts your entire operation.
What is the difference between domain reputation and inbox reputation?
Domain reputation is tied to the domain itself and reflects the overall sending history associated with that domain across all inboxes on it. Inbox reputation is specific to an individual email address. Both matter for deliverability. A new domain has no reputation (which is why warming is necessary) and a burned inbox can hurt the domain it sits on if not caught and replaced quickly.
Do SPF, DKIM, and DMARC records guarantee inbox placement?
No, but missing them almost guarantees spam placement. These authentication records are necessary conditions for good deliverability, not sufficient ones. You also need clean lists, healthy engagement rates, consistent sending volume, and relevant content to maintain strong inbox placement over time.
How does Peeker help with cold email domain management?
Peeker monitors your sending infrastructure in real time and flags inbox or domain health issues before they affect your campaigns. Rather than discovering a burned inbox after your metrics drop, Peeker surfaces the problem immediately and can automatically swap out damaged infrastructure so your sequences keep running. You can see how Peeker approaches this at Pricing.
Conclusion
Setting up a cold email domain is not complicated, but it requires doing each step in the right order and not skipping the parts that feel inconvenient. Buy a dedicated sending domain, configure SPF, DKIM, and DMARC correctly, warm your inboxes before sending, and monitor performance once campaigns are live.
The teams that get this right consistently are not doing anything magic. They are just not cutting corners on infrastructure.
If you want to stop manually tracking inbox health across a growing stack of sending domains, Peeker handles provisioning, monitoring, and automated recovery in one system. Start tracking your deliverability in minutes. Try Peeker free.
