How to warm up cold email domains: the complete playbook

What domain reputation actually means

Every domain that sends email builds a reputation over time. Inbox providers like Google, Microsoft and Yahoo track how receivers interact with mail from that domain. Replies, opens and people moving your mail to their inbox are positive signals. Spam complaints, deletes without reading and high bounce rates are negative ones. The balance of those signals determines whether future mail from the domain lands in the inbox, spam or nowhere at all.

Reputation is not a number you can see on a dashboard. It is a judgment made by each inbox provider based on historical behaviour, and it is specific to each provider. A domain that Google trusts completely can still struggle with Outlook. This is why warmup cannot be rushed and why killing a domain's reputation is so easy to do by accident.

A brand new domain has no reputation at all. From a provider's point of view, unknown is almost the same as suspicious. Starting cold outreach on day one of registration is one of the fastest ways to land in spam permanently. Warmup is how you earn the trust the domain needs before you put it to work.

Set up a sending domain, not your main one

The first rule of cold email infrastructure is that cold mail never touches your main domain. Your main domain carries your invoices, your legal correspondence and your team's day-to-day communication. One serious spam complaint episode on that domain and all of it goes to spam. That is a business problem, not just an outreach problem.

Register a dedicated domain used only for cold outreach. Common naming patterns include a prefix or suffix variant of your brand: getyourbrand.com, trybrand.com or brand-hq.com. Prospects can see the domain, so keep it professional and close enough to your brand to be recognisable. The key requirement is that it is completely separate from the domain your business actually runs on.

Set up Google Workspace or Microsoft 365 on the new domain and create real-sounding mailboxes with proper sender names. Addresses like sales@, info@ or rep1@ read as automation to both filters and people. Use names: firstname@, firstname.lastname@, or a name plus a domain variant. Real sender names get better engagement, and better engagement keeps the domain healthy.

Authentication before anything else

Before a single email goes out, including warmup emails, the domain needs SPF, DKIM and DMARC records set in DNS. These three records prove to inbox providers that the mail is genuinely from you. Without them, providers treat it as unverified, and unverified mail lands in spam or gets rejected. As of 2026, Google, Yahoo and Microsoft all require them for senders. There is no grey area here.

Start DMARC on a monitoring policy (p=none) so you can read the reports without accidentally blocking your own mail. Once you have confirmed that SPF and DKIM are passing cleanly, tighten it to quarantine and eventually reject. Also add a list-unsubscribe header to every sending mailbox. The major providers now expect it, and a one-click unsubscribe is far better for your reputation than someone hitting the spam button instead.

Run a tool like MXToolbox or Google's Postmaster Tools after setup to confirm all three records resolve correctly. A misconfigured SPF record, particularly one with too many lookups, will fail silently and you will not know until mails start going missing. Check before warmup starts, not after.

The warmup period: how long and how many

Warmup is the process of building a sending history on a new domain by sending small volumes of email that get positive engagement: opens, replies, and moves out of spam. The goal is to teach inbox providers that the domain behaves like a legitimate sender before you ask it to do real work.

The minimum warmup period is three weeks. Four is better. During that time, volume starts very low and climbs gradually. The ramp is the point. A domain that went from zero to fifty emails a day over four weeks looks completely different to a provider than one that jumped to fifty on day one.

Keep warmup running at a low level even after campaigns start. A domain that stops all warmup activity and suddenly only sends cold outreach changes its pattern in a way providers notice. A steady background of warmup emails keeps the reputation signals positive between campaign sends.

Warmup tools and what they actually do

Warmup tools automate the process of building domain reputation. They connect your mailbox and then send emails between accounts in their network, where other connected mailboxes automatically open, reply and move messages out of spam. This simulates normal human email behaviour at a small scale, which builds the domain's track record with providers.

The main tools I have seen used across client setups are Instantly, Salesforge, Mailreach and Lemwarm. Instantly and Salesforge both bundle warmup directly into their sending platform, so if you are already using either tool to run campaigns, warmup is part of the same interface. Mailreach and Lemwarm work as standalone warmup tools you can connect any mailbox to, regardless of which outreach platform you use.

All of them do the same core job: automated sending within a peer network, with positive engagement signals built in. The differences are in the size of the warmup network, how much control you have over the ramp schedule, and what reporting they surface. A larger warmup network means more variety in who your domain exchanges email with, which looks more natural to providers.

What warmup tools do not do is fix bad authentication, a spammy domain name, or copy that trips filters. Those problems exist at a level the tool cannot touch. Warmup builds reputation; it does not rescue a domain that was set up wrong or used badly before warmup began.

Pre-send checks before you touch prospects

Before any real prospect receives an email from a warmed domain, I run through a checklist. If anything on it is not green, the campaign waits. This is not caution for its own sake: a single bad send on a fresh domain can undo weeks of warmup, and the cost of waiting another few days is nothing compared to that.

Check that SPF, DKIM and DMARC are all passing using an independent tool. Check that the warmup network shows healthy inbox placement, meaning the warmup emails are landing in inbox rather than spam. Check that your list is verified, meaning you have run the addresses through a verification tool and removed anything invalid or risky. Check that your sending sequence is plain text, short and link-light. Check that daily send volume per mailbox is within the safe range and that you have a warmup layer still running.

Also send a test email from the new domain to a personal Gmail and Outlook account before going live. Check exactly where it lands, read the full headers if it goes to spam, and look up the domain on Google Postmaster Tools if you have access. That ten-minute check has saved me from launching campaigns on domains that looked fine but had a misconfigured record somewhere.

Red flags that your domain is in trouble

A domain's health can deteriorate quickly, and the early signals are easy to miss if you are not watching the right numbers. The first sign I look for is a drop in reply rate that does not match any change in copy or targeting. When nothing else changed but replies fell, deliverability is usually the reason. The emails are going out, but fewer are landing where they can be read.

A bounce rate above two percent on a verified list is a clear warning sign. It means either the list went stale faster than expected or the domain is being rejected at the server level by some providers. Either way, pause and investigate before sending more volume. High bounces compound: the more you send on a domain with rising bounces, the worse the reputation gets.

Spam folder placement is the most direct red flag. If you or a teammate receive test emails from the domain in spam, or if the warmup tool starts showing high spam placement rates, the domain is in trouble. Check MXToolbox to see whether the domain or its sending IP has landed on a blacklist. Blacklists are serious: removal requests can take days or weeks, and some providers run their own internal lists that are not publicly queryable at all.

Complaints are the worst signal, but also the one you will often find out about last. If a recipient marks your mail as spam with a provider that sends abuse reports, and you have a feedback loop set up, you will see it. Without one, you are flying blind. Set up Google Postmaster Tools on every sending domain so you at least have visibility into what Google sees.

How many domains you need for scale

A single warmed domain running at fifty emails per mailbox per day with two or three mailboxes will send somewhere between one hundred and one hundred and fifty cold emails daily. For a small campaign testing a single sequence and a tight list, that can be enough. For anything serious, it is not.

The math for a real outbound operation usually looks like this: you want to send five hundred to a thousand emails per day across a campaign, keep each mailbox well under its daily safe limit, and maintain buffer so that if one domain has a problem, the campaign does not stop. That requires three to five domains minimum, each with two or three mailboxes, all warmed and running with warmup still active in the background.

More domains also mean better inbox rotation. When you spread volume across multiple sending addresses, providers see smaller, steadier flows from each one. That looks more like legitimate business email and less like a blast campaign. The rotation is built into most sending platforms: you set up a pool of mailboxes and the tool distributes sends across them automatically.

Plan for attrition too. Even with good practices, domains occasionally get burned by a bad list or a copy mistake. If your entire campaign depends on one domain, one mistake takes everything down. If you have five domains and one gets damaged, you pull it, replace it, and the campaign continues on the others while the new one warms up.

What kills a warmed domain

I have seen warmed domains destroyed in a single week by decisions that looked fine in isolation. The most common one is a sudden volume spike. A domain that has been sending forty emails a day for a month gets handed a list of five thousand contacts and the team wants to push hard. Volume jumps to three hundred overnight. Providers see the spike, pattern changes completely, and what was a healthy domain becomes a spam sender within days.

Bad copy is the second killer. Warmup builds technical reputation but it does not change how spam filters read your message content. Copy that includes spam trigger words, too many links, images, large attachments or language that reads like a promotional blast will trip content filters regardless of how carefully the domain was warmed. Cold email should read like a short message from a person, because that is what inbox providers expect from a personal sending domain.

Sending to unverified lists is the third. A list with high numbers of invalid addresses will produce hard bounces. A sustained bounce rate above two to three percent signals to providers that the domain is sending to scraped or purchased lists, which tanks reputation fast. Verify before every send, and do not reuse old lists without re-verifying first.

The fourth killer is neglect: letting warmup lapse entirely, stopping all background sending, and then resuming a campaign weeks later. The domain has gone quiet and then suddenly spikes again. Treat warmup as ongoing maintenance, not a one-time step before launch.

Recovery: what to do when a domain is burned

The honest answer about burned domains is that true recovery is rare. Once a domain has accumulated serious spam complaints and blacklist entries, rebuilding its reputation takes months and often does not fully work. The providers remember, and the patience required to rebuild is usually more expensive than registering a new domain and warming it properly.

That said, if a domain has had a rough week but is not blacklisted, recovery is possible. Stop all campaign sends immediately. Keep warmup running at a very low level to maintain some positive signal. Check every blacklist for the domain and its sending IPs, and submit removal requests for any you find. Wait at least two weeks before testing small-volume sends again. Monitor inbox placement in the warmup tool throughout.

If the domain is blacklisted with a major provider, the path is harder. Submit a delisting request through their official process, which for Google runs through Postmaster Tools. Include evidence that you have identified and stopped the behaviour that caused the listing. These requests are not guaranteed to succeed and often take a week or more. For Outlook, use the Smart Network Data Services portal. Some blacklists require repeated requests before they act.

My usual recommendation for a burned domain is to retire it from cold outreach entirely. Move it to a low-volume newsletter or keep it alive with warmup only, so the reputation does not decay further. Register a replacement domain, warm it properly for four weeks, and resume campaigns on that. The new domain has no reputation damage to overcome. Starting clean is almost always faster than recovering a burned one.

Putting it all together

I have booked over 2000 meetings for B2B clients, and the infrastructure underneath every campaign that worked followed the same pattern. Dedicated domains kept separate from the main business. Authentication set correctly before warmup started. Four weeks of warmup using a tool with a real peer network. Modest daily volume ramped up gradually with warmup still running in the background. Verified lists. Copy that reads like a person wrote it.

The teams that skip any part of that process almost always hit deliverability problems within a few weeks of launching, and by then the damage is already done. Domain warmup is not an optional technical step. It is the foundation the rest of the campaign stands on. Get it wrong and good copy and a solid list will not save you. Get it right and the infrastructure runs quietly in the background while you focus on what the campaign is actually trying to do: book meetings with the right people.

The setup is not complicated, but it requires patience and the discipline to not shortcut the ramp. Every team I have seen try to compress warmup to one week has regretted it. Three to four weeks is not a guess; it is what the evidence from running campaigns across dozens of clients actually shows.

FAQ