How to Set Up a Sending Domain? (Without Torching Your Deliverability)

Here's a hard truth most teams learn the expensive way: your cold email campaign can have flawless copy, a perfect list, and a killer offer, and still land in spam because the sending domain underneath it was set up wrong.

A sending domain is the dedicated domain you use to send outbound email, kept separate from your primary company domain. The reason for the separation is simple: cold email carries reputation risk, and you never want that risk touching the domain your customers use to reach your support, billing, or sales teams. If a cold-sending domain gets burned, you throw it away and spin up a new one. You can't do that with yourcompany.com.

Setting one up properly isn't hard, but it is unforgiving. Skip a DNS record or rush the warmup and you'll spend the next 30 to 90 days digging out of a deliverability hole. This guide walks through the entire setup, domain choice through first live send, in the order you should actually do it.

Let's get into it.

Quick Guide on How to Setup Sending Domain

Step 1: Choose the Domain Name

The domain name matters more than most teams think. To the buyer, a good name reads as "the same company they already know." A bad name reads as either spam or a typo—and either reaction kills your reply rate before the email is even opened.

The goal is a name that looks like a natural extension of your brand. Patterns that consistently work well:

• yourco-outreach.io
• get-yourco.com
• hello-yourco.com
• yourco-team.com
• talk-to-yourco.com

There are also patterns that quietly sabotage you. Steer clear of these:

• Anything with "deal," "free," "save," or "discount" in the name—these are spam-filter magnets.
• Numbers in the domain. yourco2024.com reads as throwaway spam.
• Stacked hyphens. yourco-out-reach.com is too long and too clumsy.
• Lookalike TLDs like .email, .biz, or .info. Most inbox providers down-weight these automatically.

Whenever possible, use a .com or .io. They remain the most trusted TLDs for B2B sending, and trust is the entire game here.

Step 2: Purchase the Domain

Once you've settled on a name, buy it from a reputable registrar. Where you buy matters because some registrars are known for hosting spam, and that association can follow your domain around. Solid, clean options include Namecheap, Cloudflare Registrar, and AWS Route 53. Avoid the bargain-basement providers whose main selling point is being the cheapest.

When you check out, a few specifics make a difference:

• Buy the .com (or .io) variant as your primary.
• Register for 1 to 3 years. Longer registrations give a small but real boost to sender reputation.
• Enable WHOIS privacy. It's standard at most registrars and keeps your contact details off public records.

Just as important is what not to buy. Resist the temptation of pre-owned domains—some carry spam history that's effectively permanent, and you'll inherit every sin the previous owner committed. Bulk-discount domains fall into the same trap. The few dollars you save aren't worth the risk of starting with a poisoned reputation you can't see until it's too late.

Step 3: Set up the Mailbox Provider

With the domain in hand, you need somewhere to actually host the inboxes. For B2B cold email, there are two viable choices: Google Workspace or Microsoft 365. Both work; the right pick usually comes down to who you're selling to.

If your buyers are startups or tech-forward companies, Google Workspace tends to fit best. If you're selling into enterprise or finance, Microsoft 365 aligns better with the ecosystem your prospects already live in. Either way, budget roughly $6 to $25 per inbox per month depending on the plan.

Now for the details that quietly drive deliverability. For each inbox you create:

• Use a real person's name in the address: firstname.lastname@yourco-outreach.io. Generic addresses like sales@, info@, or hello@ get filtered far more aggressively.
• Fill in a real first and last name in the profile, not a brand or department.
• Add a small profile photo; a real headshot, not the company logo. It nudges deliverability up subtly but consistently.
• Keep the signature to a single line: name and role, nothing else. Heavy signatures with images, links, and legal text trip spam filters.

One more rule worth memorizing: keep it to 2 to 3 inboxes per domain. That's the sweet spot for most outbound programs. Pile on more than 5 inboxes per domain and you start to look suspicious to inbox providers, which is the opposite of what you're trying to achieve.

Step 4: Configure DNS records

This is the technical heart of the setup, and it's where most deliverability problems are born. Three authentication records live in your DNS at the registrar, and all three need to be in place, and verified, before you send anything. They're how inbox providers confirm you are who you say you are.

The first is your SPF record, a single TXT record at the root of the domain that lists which servers are allowed to send on your behalf:

Type: TXT

Host: @

Value: v=spf1 include:_spf.google.com -all

If you're on Microsoft 365 instead of Google Workspace, the include changes to v=spf1 include:spf.protection.outlook.com -all. And if you send through additional services like SendGrid or Mailgun, add their includes too—just make sure each include appears before the closing -all, because order matters.

The second is your DKIM record, which is generated by your mailbox provider rather than written by hand. In Google Workspace, you'll find the public key under Admin Console > Apps > Google Workspace > Gmail > Authenticate Email. In Microsoft 365, it lives in Defender > Email & collaboration > DKIM. Publish that key as a TXT record at the selector your provider specifies (for Google Workspace, that selector is typically google):

Type: TXT

Host: google._domainkey

Value: [the long public key from Workspace]

The third is your DMARC record, a single TXT record that tells inbox providers what to do with mail that fails authentication:

Type: TXT

Host: _dmarc

Value: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourco-outreach.io; pct=100

For cold-sending domains, p=quarantine is the right policy. p=reject is too aggressive and will bounce legitimate mail during setup hiccups, while p=none is too permissive to protect your reputation. Once all three records are live, verify them through MXToolbox. Every one should return green before you move on—no exceptions.

Do This, Not That: The Three Decisions You Can't Get Wrong

Most of this setup is forgiving; mess up a sending hour or a profile photo and you'll be fine. But three decisions carry outsized weight, and getting them wrong can quietly sink your whole program. Here's the fast version of what to do and what to dodge.

Why these three? Because they're the decisions inbox providers actually judge you on. Your domain name shapes first impressions and spam scoring.

Your DMARC policy tells providers how seriously to take your authentication; too loose and you're vulnerable, too strict and you'll bounce your own legitimate mail during setup. And your inbox count is one of the clearest "is this a real business or a spam farm?" signals out there.

The good news? None of these cost extra time or money to get right. They just require resisting the temptation to cut corners. Nail these three up front, and you've cleared the hurdles that trip up most cold-email programs before they even hit send.

Step 5: Add the Unsubscribe Header

As of February 2024, Gmail and Yahoo require high-volume senders to support one-click unsubscribe, and skipping it is now a fast track to the spam folder. There are two pieces to get right.

The first is the List-Unsubscribe header, which includes a mail to link or an HTTPS link recipients can use to opt out. The second is the List-Unsubscribe-Post header, which enables the actual one-click support and carries the value List-Unsubscribe=One-Click.

The good news is that most cold email tools configure both of these automatically once you connect the mailbox. The bad news is that "automatically" isn't the same as "verified." Send a test email to yourself, view the raw headers, and confirm both are present before you trust it. Two minutes of checking saves you from a silent deliverability tax.

Step 6: Connect to the cold email tool

With authentication and compliance handled, it's time to connect each inbox to the platform that will run your sequences. Whether you're using Smartlead, Instantly, Outreach, Salesloft, or ReachIQ, the process is the same: add each new inbox via OAuth or SMTP credentials so the tool can send on its behalf.

The connection itself is quick. The configuration is where you protect yourself. For each inbox, set the following guardrails:

• Daily sending cap: 30 to 50 emails per day. More than that early on is asking for trouble.
• Sending hours: 8am to 5pm in the recipient's time zone, so your mail arrives during the workday.
• Random delay between sends: 90 to 300 seconds, so your sending pattern looks human rather than robotic.
• Warmup network: Enabled. This feeds directly into the next step.

These settings aren't suggestions—they're the difference between a domain that lasts years and one that flames out in weeks.

Step 7: Run domain warmup

Here's the step everyone wants to skip and absolutely shouldn't: do not send a single live message for the first 14 days. A brand-new domain with zero history that suddenly blasts hundreds of emails looks exactly like a spammer, because that's exactly what spammers do.

Instead, let the warmup network do its job. It exchanges automated messages with other domains in the network, gradually building a track record of normal, well-received sending. Ramp the volume slowly, following a schedule like this:

One detail teams routinely get wrong: keep warmup running even after live sending begins. The continued exchange of warmup messages maintains your reputation over time. Turn it off and you remove the safety net that's quietly keeping you out of spam.

Step 8: Register with Monitoring Services

Before your first live send, set up the tools that will tell you when something's going wrong, ideally before your reply rates do. Reputation problems almost always surface in monitoring days before they show up in actual campaign performance, which gives you a window to fix things early.

Three services cover the essentials:

• Google Postmaster Tools: Add your domain here. After 7 to 14 days it begins reporting your reputation, spam rate, and authentication status.
• Microsoft SNDS: Add your sending IPs to track how Outlook and Hotmail view your mail.
• MXToolbox blacklist monitoring: Configure an email alert that fires the moment your domain or any of its IPs lands on a major blocklist.

Make checking these a weekly habit. Treating monitoring as an early-warning system rather than an afterthought is one of the cheapest insurance policies in outbound.

Step 9: The Launch Checklist

Before the first live message goes out, run through every item below. This isn't busywork—each unchecked box represents a potential 30 to 90 day setback if you discover the problem after launch instead of before it.

• Domain purchased from a clean registrar.
• Mailbox provider configured (Google Workspace or Microsoft 365).
• Inboxes set up with real first/last names and one-line signatures.
• SPF record set, returning green in MXToolbox.
• DKIM record set, returning green.
• DMARC record set, returning green.
• Unsubscribe headers verified in a test email.
• Domain warmup running for at least 14 days.
• Cold email tool connected with caps and sending hours configured.
• Postmaster Tools and SNDS monitoring enabled.
• List validated, bounce risk under 5 percent.
• Sequence reviewed for spam triggers.
• Reply routing configured.

The rule is unambiguous: if any item is incomplete, do not launch. There are no shortcuts here that don't eventually cost you more than they save.

Step 10: First Live Send

If everything above checks out and you're at least 14 days into warmup, you're finally ready to send for real. Start your first batch at 30 to 50 emails per inbox. Spread across 4 to 6 inboxes, that lands you somewhere between 120 and 300 emails—enough to learn something, small enough to stay safe.

Then watch the first four hours closely, because the early signals tell you whether your setup is solid:

• Bounce rate stays under 2 percent.
• Spam complaints stay at zero.
• Open rate climbs above 30 percent within four hours, and will keep rising over the next 24.

If any of those numbers look off, stop. Pause the campaign and diagnose the problem rather than pushing through it. Deliverability issues compound fast, and a domain you protect in the first week is a domain that keeps earning for you for months.

Common Queries Related to Setting Up Domain

How long does it take to set up a sending domain?

Plan for at least two weeks. The domain warmup alone requires 14 days before your first live send, so factor that into any campaign timeline.

Why use a separate domain for cold email?

Cold email carries reputation risk. Keeping it off your main domain protects your customer-facing email if the sending domain ever gets flagged or burned.

How many inboxes should I run per domain?

Two to three inboxes per domain is the sweet spot. More than five starts to look suspicious to inbox providers and can hurt your deliverability.

How long does it take for sending domain DNS to propagate?

DNS changes typically propagate within a few hours, though full global propagation can take up to 24–48 hours. For sending domains, allow 48 hours before expecting consistent results everywhere.

Can I skip the domain warmup?

No. Sending live mail on a cold domain looks like spam. Warmup builds reputation gradually, and tools like ReachIQ keep it running automatically alongside your campaigns.

What's a safe daily sending limit?

Cap each inbox at 30–50 emails per day. Across 4–6 inboxes, that's roughly 120–300 emails daily without raising red flags.

When can I send my first real email?

On day 14 at the earliest. Start small, then watch the first four hours: bounce under 2%, zero complaints, open above 30%.

Bottom Line

Setting up a sending domain is really an exercise in patience and discipline. None of the individual steps are difficult, but the order matters, the details matter, and the temptation to rush is constant. Buy a clean domain, separate it from your main brand, lock down SPF, DKIM, and DMARC, warm it up slowly, and monitor it relentlessly.

Do it right and you'll have an outbound asset that quietly delivers email after email straight to the inbox. Do it fast and sloppy, and you'll spend the next quarter wondering why no one's replying. Take the two weeks. Your future pipeline will thank you.