Cold email deliverability infrastructure, explained

If your cold email is landing in spam, the problem is rarely your copy. It is the infrastructure. Domains, mailboxes, DNS, warmup, and sending caps control 80 percent of deliverability. Here is how the stack actually works in 2026.

Never send cold from your main domain

A single spam complaint on your primary domain can damage transactional email, marketing email, and even meetings invites for the entire company for weeks. Always use secondary domains for cold outbound. Variants of your main domain work well: get-acme.com, tryacme.com, acme.co. Use them, redirect them to your main site, and isolate the deliverability risk.

How many domains and mailboxes

The 2026 safe configuration:

• 3 mailboxes per sending domain (4 is the absolute ceiling)
• 30 to 40 sends per mailbox per day after warmup
• 3 to 4 domains per pod for a Scale-sized motion
• Total: 9 to 16 mailboxes, ~300 to ~500 sends per day per pod

Pushing past these caps shortens mailbox lifespan dramatically. We see teams burn $5K of domain investment in a month by running 80 sends per mailbox per day.

DNS configuration that actually matters

Three records on every sending domain: SPF, DKIM, and DMARC. Misconfigured DMARC alone will route a significant share of your sends to spam.

• SPF: include your sending provider's record, hard fail unknown senders
• DKIM: 2048-bit key, set per mailbox provider (Google Workspace usually)
• DMARC: start at p=none for monitoring, move to p=quarantine once stable
• MX records pointing at the right provider
• A 301 redirect from the sending domain to your main site so links resolve

Warmup is non-negotiable

New mailboxes have zero sender reputation. Put them through a warmup tool (Smartlead, Instantly, or a standalone like Mailreach) for 2 to 4 weeks before any real campaign volume. The warmup tool simulates real conversations so providers see "normal" patterns first.

Skipping warmup is the single most common cause of "we sent 1,000 emails and got zero replies." You sent to spam folders.

Sending platform choice

Outreach and Salesloft are built for in-house teams managing complex sequences. Smartlead and Instantly are built for cold outbound at infrastructure scale (many domains, many mailboxes, automatic rotation). For managed outbound, the latter category is the right tool. Outreach was not designed for the multi-domain pattern that 2026 deliverability requires.

Monitoring you must run

• Google Postmaster Tools for any Gmail-heavy ICP
• Microsoft SNDS for Outlook-heavy ICPs
• Daily inbox placement tests (Glock Apps, Mailreach)
• Per-mailbox reply rate (sudden drop = deliverability problem)
• Bounce rate (over 3 percent means list quality or warmup problem)

List hygiene is part of deliverability

Verify every email before sending. Tools like MillionVerifier or NeverBounce reduce bounce rates to 1 to 2 percent. High bounce rates flag your sending domain to providers and tank deliverability across all your mailboxes.

What to do when a mailbox burns

Mailboxes have a lifespan. After 6 to 12 months of heavy sending, most degrade. Rotate them out, swap in new mailboxes from a warm pool, and retire the burned ones. The pod should always have 20 to 30 percent of mailboxes in warmup at any time so there is replacement capacity ready.

The hidden cost most teams miss

Domain procurement, DNS configuration, mailbox provisioning, and warmup is a real engineering task that takes 30 to 60 hours to do correctly the first time, plus ongoing maintenance. This is one of the strongest reasons to run outbound as a managed function rather than try to build it in-house from scratch.