If you are running outbound, one decision matters more than your copy, your list, or your sequence: where the email comes from.
Most founders get this wrong. They wire up a cold campaign on yourcompany.com because that is the domain they already own and trust. It feels efficient. It is also the single fastest way to damage the email reputation your whole business runs on.
This is not a style preference. It is risk management. Here is why, what changed in the rules, and what the correct setup looks like.
The core risk: your main domain is load-bearing
Your primary domain does a lot of quiet, critical work: invoices, client replies, contracts, calendar invites, proposals. All of it rides on the reputation attached to yourcompany.com.
Cold email behaves very differently from that traffic. You are writing to people who never asked to hear from you, and a few of them will mark it as spam. That is normal for outbound, and at sane volumes it is manageable. The problem is where the damage lands.
Mailbox providers like Google and Microsoft score reputation at the domain level. When a wave of your cold sends gets flagged, the provider does not file it away as "just the outbound campaign." It concludes that this domain sends mail people do not want. That verdict now follows every email from yourcompany.com.
So the invoice you send to a paying client lands in spam. The reply to a warm prospect never arrives. The password reset your customer is waiting for sits in a junk folder. You created a deliverability problem in the one place you cannot afford one.
One bad sending week on a shared domain can take weeks to repair. Sometimes it never fully recovers. We have rebuilt deliverability for businesses after exactly this mistake, and the pattern repeats: recovery is slow and uncertain, prevention is cheap. That is the trade you are making, usually without realizing it.
The rules got stricter, not looser
This used to be a best practice. Now it is closer to a requirement.
Since February 2024, Google and Yahoo enforce hard requirements on bulk senders: full email authentication, a spam complaint rate kept under 0.3 percent, and a one-click way for recipients to opt out. Cross the complaint threshold and Gmail starts rejecting or junking your mail at the domain level. The full list is in Google's email sender guidelines and Yahoo's sender requirements. Microsoft brought Outlook in line with the same authentication baseline for high-volume senders in 2025.
Two practical consequences:
- Authentication is no longer optional. Unauthenticated mail does not reach the inbox, no matter how good the copy is.
- Complaint math is unforgiving. Cold email always generates some complaints. On your main domain, those complaints count against the same score your client emails depend on.
The fix: a dedicated sending domain
You do not send cold email from your brand domain. You send it from a separate domain you own, set up specifically for outbound.
The standard move is a close lookalike of your real domain. For example, if your company lives at yourcompany.com, your sending domain might be:
- try-yourcompany.com
- get-yourcompany.com
- yourcompany.io
- yourcompany-hq.com
To the recipient it reads as legitimate, because it is. But its reputation is firewalled from your main domain. If a campaign gets flagged, the damage stays contained on a domain whose only job is outbound.
Worst case, a sending domain that takes too much damage gets retired and replaced for the cost of a domain registration. Your invoices never notice.
The mechanics, in plain terms
Setting up a sending domain is not complicated, but every step exists for a reason. Skip one and deliverability suffers.
1. Authenticate the domain: SPF, DKIM, DMARC
These three DNS records tell receiving servers your mail is real and not spoofed.
- SPF lists which servers may send on behalf of your domain.
- DKIM adds a cryptographic signature so the receiver can verify the message was not altered.
- DMARC ties the two together and tells providers what to do when a message fails the checks.
2. Warm the domain up before real volume
A brand new domain has no reputation. Register it on Monday, blast 500 emails on Tuesday, and providers read that pattern as exactly what spammers do. You get throttled or blocked before you reach a single prospect.
Warmup means starting with a trickle and raising volume slowly over two to four weeks, sending and receiving small amounts of natural-looking mail until the domain has a track record. By the time you scale, it looks established. Industry groups like M3AAWG have documented gradual ramp-up as standard sender practice for years. In our experience, skipping warmup is the most common reason a technically correct setup still lands in spam.
3. Keep per-mailbox volume low and spread the load
Each mailbox can only safely send a few dozen cold emails per day. Push past that and you trip the filters.
Real outbound volume does not come from cranking one inbox harder. It comes from spreading the load: multiple mailboxes, often across several sending domains, each sending a modest daily amount. The total adds up to serious reach while every individual sender stays inside safe limits.
4. Verify the list before you send
Sending to dead or invalid addresses spikes your bounce rate, and high bounces wreck a domain's reputation fast. Run every list through email verification before the first send, and re-verify anything that has been sitting for months.
5. Redirect the sending domain to your real site
When a curious prospect types try-yourcompany.com into a browser, they should land on yourcompany.com. A simple redirect keeps the experience coherent and reinforces that a real business is behind the email.
6. Watch placement, not just opens
Open rates will not tell you that you slid into the spam folder. Monitor where your mail actually lands. Google Postmaster Tools shows your domain reputation and spam complaint rate for Gmail, which is exactly the number the new rules judge you on. Catch a slide early and you can slow down and recover. Catch it late and you are rebuilding.
7. Never mix transactional and cold mail
This is the rule that holds everything else together. Invoices, receipts, contracts, and client replies stay on your main domain; cold outreach stays on the sending domains. The two should never touch. Every other practice on this page exists to protect that separation.
FAQ
Will a lookalike domain hurt my brand or look like spam? No, not when it is done right. A clean variant like try-yourcompany.com that authenticates properly and redirects to your real site reads as legitimate. What looks like spam is an unauthenticated, unwarmed domain, regardless of its name.
Why not just use a subdomain like mail.yourcompany.com? A subdomain still shares reputation signal with the root domain. Providers can and do let subdomain behavior color the whole domain's standing. A separate domain gives you a real firewall. Subdomains are fine for mail your audience opted into, not for cold.
How many sending domains do I actually need? It depends on volume. A modest campaign runs fine on one or two domains with a handful of mailboxes. Higher volume needs more, so each mailbox stays well under its daily safe limit. Start small and add capacity as you scale.
What does the setup cost? Very little compared to what it protects. A domain costs roughly the price of a lunch per year, and a mailbox a few dollars a month. The real investment is the two to four weeks of warmup time, which is why you register sending domains before you need them.
Can I move cold email back to my main domain once everything is warmed up? You can, but you should not. The point of a dedicated domain is permanent separation. Even a well-warmed domain carries cold-send risk, and you never want that risk attached to your invoices and client communication.
How Markster handles this for you
When we install a growth system, the sending infrastructure is part of the build, not an afterthought. We register and configure dedicated sending domains, set up authentication, run the warmup, and structure the mailboxes so your outbound scales safely. Your main domain stays clean the entire time.
And nothing goes out without your approval. Every campaign passes through your hands before it sends. We handle the plumbing so you never have to gamble your real inbox to find new clients.
If you are about to run outbound, or you are already running it from your main domain, it is worth a conversation before the next send. Start that conversation at markster.ai and we will walk you through the setup.
