Back to Learning Hub
Technical Guide

Cold Email Infrastructure: The Complete Technical Guide

SPF, DKIM, DMARC, warmup, and monitoring — everything you need to build bulletproof sending infrastructure and land in the inbox every time.

Contents

What Is Cold Email Infrastructure?

Cold email infrastructure is the technical stack that determines whether your emails land in the inbox or the spam folder. It encompasses your domain setup, DNS records, sending platform, IP reputation, warmup process, and monitoring tools.

Most senders focus 90% of their energy on copy and sequences — but 70% of deliverability failures are infrastructure problems. No amount of great writing fixes a broken SPF record.

Your infrastructure has five core layers: 1. Domains — the sending identities you own 2. DNS Authentication — SPF, DKIM, DMARC records that prove you own those identities 3. Sending Platform — the software that sends mail and manages IPs 4. Warmup — the process of building IP/domain reputation before full volume 5. Monitoring — tracking deliverability health over time

SPF: Sender Policy Framework

SPF is a DNS TXT record that tells receiving servers which IP addresses are authorized to send email for your domain.

How to set it up: 1. Go to your domain registrar's DNS settings 2. Add a TXT record on your root domain (@) 3. Set the value to: v=spf1 include:yoursendingplatform.com ~all

Common SPF mistakes:

  • •Having more than one SPF record (causes failures — merge them into one)
  • •Using -all (hard fail) when you haven't tested all your sending sources
  • •Not including your ESP's SPF include

Check your SPF: Use mxtoolbox.com/spf or dmarcanalyzer.com to validate.

What each qualifier means:

  • •+all — Dangerous: allows any server to send
  • •~all — Soft fail: suspicious servers accepted but marked
  • •-all — Hard fail: unauthorized servers rejected outright (best, once confirmed)

DKIM: DomainKeys Identified Mail

DKIM adds a cryptographic signature to every email you send. Receiving servers verify the signature against a public key stored in your DNS. This proves the email wasn't modified in transit and actually came from your domain.

How to set it up: 1. Generate a DKIM key pair in your sending platform (most do this automatically) 2. Copy the public key they provide 3. Add it as a TXT record on your domain: selector._domainkey.yourdomain.com

Common DKIM mistakes:

  • •Not enabling DKIM in your sending platform (many require you to turn it on manually)
  • •Using a 1024-bit key instead of 2048-bit (2048 is now required by Gmail)
  • •Not rotating keys periodically (rotate every 6-12 months)

Check your DKIM: Send an email to mail-tester.com or use mxtoolbox.com/dkim.

Selectors: Your sending platform may use multiple selectors (e.g., s1._domainkey, s2._domainkey). Add all of them.

DMARC: Domain-based Message Authentication

DMARC tells receiving servers what to do when an email fails SPF or DKIM checks. It also enables you to receive reports showing who is sending email from your domain.

How to set it up: Add a TXT record: _dmarc.yourdomain.com

Start with a monitor policy: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com; ruf=mailto:dmarc@yourdomain.com; pct=100

Then escalate to quarantine, then reject:

  • •p=none — Monitor only, no action taken
  • •p=quarantine — Failing emails go to spam
  • •p=reject — Failing emails are blocked entirely

Timeline recommendation:

  • •Month 1-2: p=none + analyze reports
  • •Month 3: p=quarantine
  • •Month 4+: p=reject

2024 Gmail Requirement: Gmail now requires a DMARC policy for anyone sending 5,000+ emails/day to Gmail addresses. p=none satisfies this requirement.

DMARC Report Analyzers: dmarcanalyzer.com, postmarkapp.com/dmarc, valimail.com

Domain & IP Warmup

Warmup is the process of gradually increasing your sending volume from a new domain or IP address. Mailbox providers watch for sudden volume spikes — a brand new domain sending 1,000 emails on day one is a massive spam signal.

30-Day Warmup Schedule: | Week | Daily Volume per Inbox | |------|------------------------| | Week 1 | 10-20 emails | | Week 2 | 25-50 emails | | Week 3 | 50-100 emails | | Week 4 | 100-200 emails |

What warmup tools do: Services like Instantly.ai, Smartlead, and Mailreach send automated emails between real inboxes and mark them as "not spam" — building your reputation algorithmically.

Warmup rules:

  • •Always use your sending platform's built-in warmup OR a dedicated tool like Mailreach
  • •Never send cold emails from a fresh domain without 2-4 weeks of warmup first
  • •Don't skip warmup on new inboxes added to an existing domain
  • •Monitor Google Postmaster Tools during warmup

Signs your warmup is going well:

  • •Domain reputation shows "High" in Google Postmaster
  • •Less than 0.1% spam rate
  • •DMARC reports showing legitimate alignment

Ongoing Monitoring

Setting up your infrastructure is step one. Keeping it healthy is the ongoing work most senders ignore — until they hit a deliverability crisis.

Weekly checks:

  • •Google Postmaster Tools: spam rate, domain reputation, IP reputation
  • •MXToolbox blacklist check: mxtoolbox.com/blacklists
  • •Bounce rate in your sending platform (keep below 2%)

Monthly checks:

  • •Run a new inbox placement test (GlockApps, Mailreach, or mail-tester.com)
  • •Review DMARC reports for unauthorized senders
  • •Audit unsubscribes and spam complaints

Red flags to watch:

  • •Spam rate above 0.08% in Google Postmaster → pause and diagnose immediately
  • •Domain reputation drops to "Low" → stop sending from that domain for 7-14 days
  • •Bounce rate spikes → clean your list immediately

Tools for monitoring:

  • •Google Postmaster Tools (free, essential)
  • •GlockApps — inbox placement tests across 50+ providers
  • •MXToolbox — DNS, blacklist, header analysis
  • •Dmarcanalyzer — DMARC report analysis

Pre-Send Infrastructure Checklist

Check off each item before sending your first campaign from a new domain.

0/23 complete

Domain

SPF

DKIM

DMARC

Warmup

List

Ready to audit your current setup?

Run our free deliverability audit to find gaps in your infrastructure instantly.