Key takeaways
- Send cold email from secondary domains so a reputation problem never touches the domain your team uses for customer and internal mail.
- Start with a small number of domains and a few mailboxes each, and add more only when volume or bounce data says you need them.
- Every sending domain needs SPF, DKIM and DMARC passing, a working website and unsubscribe handling before it sends anything.
Picture a 25-person SaaS team that decides to start outbound. Someone sends 400 cold emails from the CEO’s mailbox on the company domain. A week later, the invoice emails to customers are landing in spam.
That’s the reason cold email domains exist. A secondary domain is a separate domain you use only for outbound, so any reputation damage stays away from the domain that carries your real business mail. Below is how we’d set them up: how many, how to name them, the DNS, and when to rotate.
Why you shouldn’t cold email from your main domain
Your primary domain carries support replies, invoices, calendar invites and sales conversations with customers. Mailbox providers build one reputation per domain, so cold outreach and critical mail share a fate.
Cold email also carries more risk by nature. You’re writing to people who haven’t asked to hear from you, so some will mark it as spam or bounce. Isolate that risk on a domain you can afford to pause.
A secondary domain isn’t a loophole. It won’t rescue a bad list or a weak message. It just limits the blast radius when something goes wrong.
How many sending domains you need
Work backwards from volume. Pick a daily send target, then divide by a cautious per-mailbox cap, then by the number of mailboxes you’ll put on each domain.
Here’s an illustration (not a provider rule): you want 300 cold emails a day. At about 30 per mailbox per day, that’s 10 mailboxes. At 3 mailboxes per domain, that’s 4 domains.
Those caps are working rules of thumb, not limits set by Gmail or Outlook. Start lower than you think you need, and let the data raise the ceiling. More domains also means more to manage, so don’t buy twenty before you’ve proven two work.
Naming and picking domains
The domain should be recognisable to a prospect and clearly yours. If someone checks it, they should land on your real site.
- Use a close variation. A prefix or suffix on your brand name, or the same name on a different top-level domain.
- Keep it plain. Skip hyphen strings, random characters and anything that reads like a spam domain.
- Don’t impersonate. Never use a name that suggests you’re a different company or a bank. It’s misleading and gets domains blocked.
- Redirect the website. Point each domain at your main site so a curious prospect sees a legitimate business.
On mailboxes, use real people. Each one should have a real name, a signature and a photo that match a person on your team.
DNS and authentication
This is the part that decides whether you reach inboxes at all. Every sending domain needs SPF, DKIM and DMARC passing before its first email.
Google’s sender rules, in force since February 2024, require bulk senders to authenticate with SPF, DKIM and DMARC, offer one-click unsubscribe and keep spam complaints below 0.3%. Even if you send well under bulk volume, treating that as your minimum is the safest habit.
Per-domain setup checklist
- SPF record lists only the services that send for the domain
- DKIM signing is on for every mailbox
- DMARC policy is published, starting with monitoring
- Website or redirect resolves to your main site
- Unsubscribe and opt-out handling works
- Mailboxes are named, signed and have profile photos
Start DMARC in monitoring mode, read the reports for a couple of weeks, then tighten. Our cold email deliverability checklist walks through each record.
Not sure how many domains your volume needs?
Book a free 30-minute consultation. We'll review your current domains, mailboxes and send targets and show you how a safe sending setup would work for your team.
Warm up before you send
A new domain has no history. Send small volumes of real mail first and grow slowly over roughly a month, watching bounces and replies as you go. Don’t load a full list on day one. The email warm-up guide has a week-by-week ramp you can copy.
Monitoring, rotation and retirement
Domains aren’t set-and-forget. Check them every few days, and act on what you see.
| Signal | What it usually means | What to do |
|---|---|---|
| Bounces climbing | List quality problem | Verify addresses, stop risky segments |
| Replies falling | Placement or copy problem | Run seed tests, review messaging |
| Complaints rising | Targeting or frequency problem | Cut volume, tighten the audience |
| Placement poor on one domain only | That domain is damaged | Rest it, fix the cause, retest |
Rotation means resting a struggling domain and shifting its volume to healthy ones while you fix the cause. Retire a domain only if it doesn’t recover after the fix. If every domain struggles at once, the problem isn’t the domains. It’s your list or your message.
Mistakes we see most
- Buying too many domains too fast. Ten cold domains with no warm-up just creates ten problems.
- Mailboxes on the primary domain “just for a few”. That’s how the main domain gets hurt.
- Skipping the website. A blank domain looks like a throwaway, and it is.
- Treating rotation as a fix. Swapping domains doesn’t repair a bad list.
- No opt-out handling. Honour unsubscribes quickly and keep a suppression list across all domains.
If you plan to add AI to outreach, the same discipline applies. Fewer, better-timed emails beat volume, as we explain in our guide on AI SDRs and human review.
The bottom line
Use secondary domains to protect the one your business depends on. Size them from your volume, name them plainly, get SPF, DKIM and DMARC passing, warm them up and watch the numbers. Rotate on data, not on a hunch.
Sources
Want this working for your team?
Book a free 30-minute consultation. We’ll review your current setup and use cases, show you how it would work for you, and leave you with a recommended plan.