Order queue open · Verified lists delivered within 24–48 hours
Cold email infrastructure explained: what sending domains, inboxes, authentication records, and sending tools are and how they work together to determine deliverability.
Ryan Mercer
SDR turned cold email consultant, 8 years outbound · Updated June 23, 2026
Last updated: July 2026 · Ryan Mercer, SDR turned cold email consultant, 8 years outbound
TL;DR — 5 things to know before reading
Cold email infrastructure is the part of the stack that most practitioners understand least and spend the least time on. The result is predictable: campaigns optimized at every content level — personalized copy, tested subject lines, carefully timed sequences — that still underperform because the technical foundation is broken.
Understanding the infrastructure layer does not require deep technical knowledge, but it does require knowing what the components are, why each one matters, and what happens when any one of them is wrong. This guide explains each component of a cold email infrastructure stack, how they interact, and what a correctly configured setup looks like at different volume levels.
Cold email infrastructure has four distinct components that must all be correctly configured to produce reliable inbox placement:
Each component is a potential failure point. A campaign can have excellent copy, a well-defined ICP, and a verified contact list, and still achieve 20% inbox placement if authentication records are misconfigured or the sending domain has been blacklisted.
A sending domain is the domain name that appears after the @ in the sender's email address. It is not the business's primary website domain.
Why a separate sending domain is required:
Cold email generates spam complaints at a higher rate than transactional or marketing email, because not every recipient wants to receive it. When those spam complaints accumulate on the primary business domain, they affect all email from that domain: customer service correspondence, sales replies, marketing campaigns, and executive email. The reputation damage is not isolated to the cold email campaign.
The correct setup: register 1–2 sending domains per cold email operation, separate from the primary business domain. Use naming patterns that are recognizable as related to the business without being the exact primary domain. These domains are used exclusively for cold outreach and absorb any reputation impact from campaign-generated complaints without touching the primary domain's standing.
Domain age and reputation:
Newly registered domains begin with no reputation history. Mailbox providers apply conservative filtering to emails from new domains regardless of authentication or warmup status. Domain age is a signal: older domains with consistent legitimate sending history are evaluated more favorably. The warmup process (covered below) accelerates the development of positive reputation on new domains, but cannot fully substitute for domain age on a very short timeline.
How many sending domains:
At low volume (under 1,000 contacts per month), a single sending domain is sufficient. At 5,000 contacts per month, 2 domains distribute reputation risk. At 10,000+ per month, 3–4 domains are the standard configuration, with 3–5 inboxes per domain and dedicated domains per audience segment for risk isolation.
An email inbox is an individual email account on a sending domain. The inbox is what sends and receives email. A sending domain can host multiple inboxes, each with a separate address and sending reputation.
Inbox count determines sending capacity:
Per Woodpecker's guide on daily sending limits, each properly warmed inbox can safely send 30–50 cold emails per day without triggering spam filters. The daily sending limit per inbox is the primary constraint on cold email volume.
| Monthly contact target | Inboxes needed | Domains needed |
|---|---|---|
| 1,000/month | 2–3 | 1 |
| 5,000/month | 6–8 | 2 |
| 10,000/month | 12–15 | 3–4 |
| 20,000/month | 24–30 | 5–8 |
Assumes 40 emails/inbox/day, 21 working days/month. Source: Woodpecker's guide on daily sending limits — verified June 2026
Inbox provisioning with Inframail:
Inframail provisions Microsoft 365 inboxes on custom domains with automatic DNS configuration. The inbox provisioning step includes SPF, DKIM, and DMARC configuration (see Component 3), eliminating the manual DNS setup that is a common source of configuration errors in manually provisioned inbox stacks.
Microsoft 365 inboxes carry the sending reputation of the Microsoft IP range, which is broadly trusted by Gmail, Outlook, and other major mailbox providers. This is an infrastructure advantage compared to inboxes provisioned on generic shared hosting or unknown IP ranges.
Warmup before cold sends:
Every new inbox requires a warmup period before cold campaigns can launch. Per Woodpecker's email warmup guide, the minimum warmup timeline is 4–6 weeks, with full maturity at 12 weeks. Instantly includes an automated warmup network that manages this process for all connected inboxes.
Authentication records are DNS entries that verify the identity and integrity of the sending domain. All three must be configured and passing before cold campaigns launch. Per the Mailgun SPF, DKIM, and DMARC guide:
| Record | Function | What happens without it |
|---|---|---|
| SPF | Specifies which servers can send from the domain | Email may be marked as suspicious or rejected |
| DKIM | Cryptographically signs outgoing email | Email cannot be verified as unmodified in transit |
| DMARC | Defines handling for SPF/DKIM failures | No policy enforcement, domain easier to spoof |
Email without all three configured and passing fails the basic verification checks that Gmail and Outlook apply to determine whether a sending domain should be trusted for inbox delivery.
Inframail configures all three records automatically for provisioned inboxes. For manual inbox setups, each record must be added to the domain's DNS configuration and verified using a tool like MXToolbox before the warmup period begins.
The sending platform manages the operational layer: sequence scheduling, inbox rotation, reply detection, warmup network participation, and campaign analytics. It is the tool that coordinates all three physical components (domains, inboxes, authentication) into a functioning cold email operation.
Instantly provides all four of these functions in a single platform:
All connected inboxes and domains are managed from a single workspace regardless of how many are in use. At 10 inboxes across 3 domains, the operational management complexity in Instantly is the same as at 2 inboxes across 1 domain.
A cold email campaign with 1,000 contacts per month set up correctly:
Domain reputation monitored weekly in Google Postmaster Tools. Domains checked monthly against MXToolbox's blacklist checker. Bounce rates monitored per campaign to catch any contact list quality issues.
This setup produces reliable 90–95% inbox placement, enabling the reply rate benchmarks documented in Woodpecker's 2025 cold email benchmark study.
"The infrastructure framing was the most useful reframe for us. We were treating cold email as a copywriting problem when it was actually an infrastructure problem. We spent a quarter testing subject lines and first-line variations on a campaign that had two fundamental infrastructure failures: inboxes that had been running without warmup for months, and a contact list with a 7% bounce rate that was destroying our domain reputation. When we fixed the infrastructure — proper warmup, verified contacts, authenticated domains — our reply rate went from 2.8% to 11% without touching the copy at all." — G2 reviewer, Instantly reviews on G2
Instantly holds a 4.9/5 rating from 2,800+ verified reviews on G2, with inbox management, warmup network, and domain health monitoring cited as the infrastructure tools most valued by teams scaling from low-volume to high-volume cold email operations.
| Need | Tool | Notes |
|---|---|---|
| Verified B2B contacts | Quarvio | One-time purchase, no subscription |
| Email inboxes | Inframail | Microsoft 365 inboxes, auto DNS |
| Cold email sending | Instantly | Sequences, warm-up, reply tracking |
| LinkedIn outreach | Aimfox | Connection campaigns, Unibox |
What is the difference between a sending domain and a primary business domain?
The primary business domain is the domain used for the company's public identity: website, marketing email, customer correspondence. The sending domain is a separate domain registered specifically for cold outbound email. Keeping them separate ensures that spam complaints and reputation signals from cold email campaigns do not affect the primary domain's ability to deliver legitimate business correspondence.
How many inboxes do I need to get started with cold email?
Two to four inboxes on one or two sending domains is sufficient for a starting volume of 500–1,000 contacts per month. Each inbox requires 4–6 weeks of warmup before cold campaigns launch. The inbox count scales linearly with volume: each additional warmed inbox adds roughly 40 contacts per day of safe sending capacity.
What is the most important infrastructure component to get right first?
Email authentication (SPF, DKIM, DMARC) is the first priority because it is a binary pass/fail that affects all subsequent infrastructure performance. An unwarmed inbox with correct authentication will eventually recover its reputation. An inbox with missing or incorrect authentication faces permanent filtering issues regardless of warmup status. Configure and verify authentication before any sending begins.
Do I need technical knowledge to set up cold email infrastructure?
Not if using managed infrastructure tools. Inframail handles domain provisioning, inbox creation, and DNS configuration automatically. Instantly manages warmup, sequence scheduling, and inbox rotation. The operational setup requires understanding what each component does (covered in this guide) but does not require manual DNS configuration or server management.
Infrastructure determines whether your emails reach the inbox
The most important input to cold email infrastructure — after domains, inboxes, and authentication — is verified contact data. High bounce rates from unverified contacts damage domain reputation and undo weeks of warmup progress. Quarvio delivers pre-verified B2B contacts as a one-time purchase. No subscription, no data degrading over time.
