The days of sending cold email campaigns from your primary corporate domain with standard Google Workspace settings are long gone. In 2026, ESPs like Google and Microsoft deploy strict machine learning filters that actively penalize any sender lacking ironclad cryptographic verification.

If your domain reputation dips below 95%, your messages skip the primary inbox and head straight for the spam folder. Here is the technical protocol I use to establish and protect cold outreach infrastructure.

1. Domain Isolation & Secondary Domains

Never send automated cold outbound from your primary operational domain (e.g., company.com). If a sequence receives spam flags, it can impair company-wide transactional receipts, investor updates, and client communications.

Instead, purchase 2 to 4 variation domains (e.g., getcompany.com, trycompany.com). Set up 301 redirects to your main website for any web visitors, but use the MX records exclusively for dedicated outreach mailboxes.

2. The Cryptographic Trifecta: SPF, DKIM, and DMARC

Every sending mailbox must have three distinct DNS records configured:

  • SPF (Sender Policy Framework): A TXT record specifying which IP addresses and mail servers are authorized to send on behalf of your domain.
  • DKIM (DomainKeys Identified Mail): A public-private key pair that cryptographically signs every outgoing email, proving the message was not tampered with in transit.
  • DMARC (Domain-based Message Authentication, Reporting & Conformance): Instructs receiving servers what to do if SPF or DKIM fails (start with p=none for monitoring, then graduate to p=quarantine or p=reject).

3. Gradual Warmup and Sending Limits

A brand new domain cannot send 100 emails on day one. I run new accounts through an automated warmup network (such as Instantly or Smartlead) for at least 14 to 21 days before initiating live prospect sequences.

Even after warmup, cap outbound volume at 30 to 40 emails per inbox per day. If you need to send 200 emails daily, scale horizontally across 5 mailboxes rather than pushing one inbox to the breaking point.