Cold Email Domain Strategy 2026: Buying, Warming, and Rotating Sending Domains

By Puzzle Inbox Team · Jun 21, 2026 · 13 min read

Cold email domain strategy for 2026: buy domains at GoDaddy, Hostinger, Cloudflare, pick the right TLD, warm them, and rotate at scale without burning reputation.

Why your sending domain choice matters more than your subject line

Operators new to cold outreach spend hours rewriting subject lines, then send from a domain that gets every message routed to spam before a human sees the inbox. The subject line decides whether an opened email gets read. The cold email domain decides whether the email gets opened at all, because mailbox providers like Google and Microsoft score the sending domain before they ever look at the body. If the domain has poor authentication, no engagement history, or a pattern that looks like the last 400 spammers who registered the same TLD on the same day, the message lands in the junk folder regardless of how clever the copy is.

This is the part most senders learn the hard way. They buy one cheap domain, attach five inboxes, blast 2,000 emails in week one, and watch their reply rate sit at 0.1% because nothing arrives in the primary tab. A real domain strategy cold email playbook treats domains as inventory. You buy them in batches, authenticate them properly, warm them on a schedule, and rotate them out before they burn. The rest of this guide walks through exactly how to do that, with the math for how many domains you need at 200, 1,000, 5,000, and 10,000 sends per day, and where Puzzle Inbox fits depending on whether you bring your own domain or rent ours pre-warmed. If you want the executive version of our setup, the how it works page is the shortest path.

Never send cold from your primary business domain (the blacklist risk)

If your company runs on hello@yourbrand.com for billing, support, contracts, and your CRM transactional mail, you do not send cold outreach from yourbrand.com. Ever. Not from a subdomain, not from a "marketing" alias, not from anywhere connected to the main MX record. The reason is simple. Cold email generates spam complaints. Spam complaints generate blacklist hits at Spamhaus, Barracuda, and SORBS. Once your primary domain is listed, every transactional email your business depends on starts failing, including password resets, invoices, support replies, and contract signing reminders. You will spend the next two weeks emailing blacklist operators while your real customers wonder why your platform is broken.

The fix is to register secondary sending domains specifically for cold outreach, keep them organizationally and technically separate from your primary, and treat them as disposable. A burned domain gets retired and replaced. A burned primary domain takes your business with it. This is also why every credible cold email setup, including the one we walk through in our process, starts with new domains rather than splicing onto an existing one.

The 3 / 100 ratio: how many inboxes per domain you actually get

The two providers we sell, Google Workspace and Microsoft 365, have different hard limits on how many mailboxes you can attach to a single domain before deliverability collapses. These are not soft suggestions. They are the ratios that decide whether your reputation builds or breaks.

Google Workspace: 3 inboxes per domain, mandatory. Google's anti-abuse systems flag any domain that suddenly hosts more than a small number of outbound-heavy mailboxes. Three is the ceiling that consistently stays clean. If you want 30 Google sending mailboxes, you need 10 domains. If you want 300, you need 100 domains. There is no shortcut. We enforce this on every Google Workspace order.

Microsoft 365 / Outlook: 100 inboxes per domain, mandatory. Microsoft tolerates much higher mailbox density on a single domain. One hundred is the working ceiling. So 30 Outlook mailboxes can sit on one domain. Three hundred would want at least three domains. This is why Outlook is the cheaper per-inbox path at volume, covered in detail on the Outlook 365 page.

Both providers also cap daily send volume per mailbox. Google runs at 12 cold sends plus 12 warmup. Outlook runs at 3 cold sends plus 3 warmup. Multiply those by your inbox count to get your real daily ceiling. We break down the volume math further in how many cold email inboxes.

The TLD myth: .info, .help, and .site deliver the same as .com

This is the single most repeated piece of bad advice in cold email forums. Someone insists that .com is the only "trustworthy" TLD and that .info or .help lands in spam by default. It is wrong, and it has been wrong since Gmail and Outlook moved their filters to engagement-based scoring around 2018.

The TLD is part of the domain string. It is not a separate reputation lane. Google and Microsoft score domains on authentication (SPF, DKIM, DMARC alignment), age, engagement signals (opens, replies, lack of complaints), and content patterns. The literal characters after the final dot are not weighted independently. A .com domain registered yesterday with no DMARC record and 40% bounce rate will deliver far worse than a .info domain that has been authenticated, warmed for 60 days, and has consistent reply behavior.

TLD deliverability is therefore a non-issue once authentication is in place. We use .info, .help, and .site routinely for our Pre-Warmed inventory because they are cheaper to acquire at scale and they perform identically once warmed. If your CMO insists on .com for branding reasons, fine, buy .com. But do not pay 10x more thinking the TLD itself buys you inbox placement. It does not. For a deeper dive on what actually moves the needle, see email domain reputation.

Standard inboxes: bring your own domain from GoDaddy, Hostinger, or Cloudflare

If you already own domains, or you want full control of the domain asset, the Standard track is the right choice. You buy domain GoDaddy Hostinger Cloudflare or any registrar you prefer, hand us the domain plus DNS access, and we provision Google Workspace or Microsoft 365 mailboxes on top.

Here is what each registrar costs you in practice. GoDaddy is the most marketed and usually the most expensive at renewal, but their dashboard is the easiest if you have never managed DNS. Hostinger is the budget option, often $1 to $3 for a .com first year and reasonable renewals. Cloudflare Registrar sells domains at wholesale cost with no markup, which is the cheapest at scale, but you need to point your nameservers at Cloudflare first. Namecheap and Porkbun sit in the middle and both have clean APIs if you want to script bulk registration.

For Standard inboxes, you keep the domain. Puzzle handles SPF, DKIM, and DMARC setup on your DNS, configures the Google or Microsoft tenant, creates the mailboxes, and delivers credentials within 24 to 72 hours. The full setup walkthrough is on getting started. Authentication is non-negotiable. If you want to understand each record before we configure it, the SPF DKIM DMARC setup guide covers what we deploy and why.

Pre-Warmed inboxes: Puzzle's own generic domains, no BYOD

The Pre-Warmed track exists because warmup reputation lives at the domain level, not the mailbox level. You cannot move a 60-day warm reputation from our domain to your domain by renaming the mailbox. The reputation is anchored to the literal domain string and its DKIM signing history. This is why customers cannot bring their own domain for Pre-Warmed inboxes, and it is the most common point of confusion at checkout.

What we actually do: we register batches of generic .info, .help, and .site domains as inventory. We configure SPF, DKIM, and DMARC the day they land. We warm them with automated sender-receiver traffic for 14 to 100 days before any customer touches them. By the time you order, the domain already has measurable reply history, consistent inbox placement signals, and clean authentication telemetry. You get a mailbox like jane.smith@brightcatalyst.info that is ready to send the day you connect it. Pricing for both tracks is on pricing.

Why no BYOD for Pre-Warmed. If we let you bring your own brand-new domain and called it "pre-warmed," we would be lying. The warmup history belongs to the domain we registered and warmed. Renaming the mailbox or changing the From display name does not transfer that history. If you need your brand in the From address, Standard is the right product and we will warm it for you starting from day zero. If you want speed-to-first-send and you do not care that the domain is generic, Pre-Warmed is the right product. Pick based on the goal, not the wishful thinking.

How many domains for X cold emails per day

This is the math people skip and then complain about results. Plug your daily volume target into the right formula and buy domains accordingly. We always recommend running 70 to 80 percent of the technical ceiling so you have headroom for bounces, retries, and warmup overlap.

200 cold emails per day

Google path: 200 / 12 = 17 mailboxes. At 3 per domain, that is 6 domains. Outlook path: 200 / 3 = 67 mailboxes. At 100 per domain, that is 1 domain. Outlook is cheaper here for raw volume, Google delivers higher reply rates for B2B mid-market. Most operators at this volume start on Google with 6 domains and 18 inboxes.

1,000 cold emails per day

Google path: 1000 / 12 = 84 mailboxes. At 3 per domain, that is 28 domains. Outlook path: 1000 / 3 = 334 mailboxes. At 100 per domain, that is 4 domains. The cost gap widens fast. Many teams run a hybrid: Google for tier-1 prospects, Outlook for tier-2 and reactivation.

5,000 cold emails per day

Google path: 5000 / 12 = 417 mailboxes, which is 139 domains. Outlook path: 5000 / 3 = 1667 mailboxes, which is 17 domains. At this volume nobody runs pure Google. The standard mix is 70 percent Outlook for raw lift, 30 percent Google for high-intent segments.

10,000 cold emails per day

Google path: 10000 / 12 = 834 mailboxes, 278 domains. Outlook path: 10000 / 3 = 3334 mailboxes, 34 domains. This is agency or platform scale. You are managing the domain estate as inventory, with rolling registrations and retirements every month. The infrastructure decisions matter more than the copy at this point.

Domain age and reputation

Brand new domains carry a "newness penalty" with Google and Microsoft. A domain registered yesterday and pushed straight into outbound at full volume will get filtered hard. The fix is not to wait six months before sending. The fix is to warm. Warmup means low-volume sender-receiver traffic with realistic open and reply patterns for 14 to 30 days minimum before you ramp.

If you are running Standard inboxes on your own domain, we ramp slowly: 5 sends per day in week one, 15 in week two, 30 in week three, full volume by week four. If you are on Pre-Warmed, we already did the warmup before you got the mailbox. Domain reputation compounds. A domain warmed for 60 days delivers significantly better than the same domain warmed for 14 days, which is why our Pre-Warmed inventory sits between 14 and 100 days of pre-aging when it ships. For the symptoms of an under-warmed domain, see cold emails landing in spam fix.

Registrar choice in practice

Pick a registrar based on three things: per-domain cost at your volume, DNS speed and reliability, and API quality if you are buying in bulk. GoDaddy has the best support phone line and the worst renewal prices. Hostinger has the lowest first-year cost and is fine for DNS reliability. Cloudflare has the cheapest renewals and a fast API, but requires you to migrate nameservers, which adds a step. Namecheap is the boring middle option that works. Porkbun has the cleanest pricing and good API access.

For Standard customers, we do not care which registrar you use. We accept DNS access from any of them. We will tell you exactly which records to add or, if you grant temporary delegated access, we will add them ourselves. Avoid registrars that lock DNS behind paywalls or refuse API access. Those exist and they will slow your setup from 24 hours to a week.

When to rotate domains

Cold email domains are consumables. They have a working life and then they degrade. Plan for rotation from day one, not after your reply rate craters.

The clearest signal to rotate is when reply rate drops by 30 percent or more on a specific domain while the rest of your estate holds steady. The second signal is rising hard-bounce rate from previously good lists, which usually means the domain has been flagged in B2B bounce databases. The third signal is delivery latency, where messages start arriving 6 to 12 hours late instead of in seconds.

At low volume (under 1,000 sends per day) you might run the same domains for 9 to 12 months. At medium volume (1,000 to 5,000) plan to retire and replace 20 to 30 percent of your domain estate quarterly. At high volume (5,000 plus) you should be retiring weekly and onboarding new domains weekly so you always have warm replacements ready. This is why we run continuous warmup on the Pre-Warmed pool. You are not waiting for new inventory to age. It is already aging in the background.

The access options: 2FA disabled or restricted sub-account

For us to provision, monitor, and support the mailboxes you buy, we need a way in. There are two options and you pick the one that fits your security posture.

Option one: disable 2FA on the admin account. This is the simpler path and what most customers choose for cold-email-only tenants where the admin account is not tied to any production data. It removes a friction point during the 24 to 72 hour setup window and during any future support requests. It is what we recommend for tenants that exist solely for outbound.

Option two: add support@puzzleinbox.com as a restricted sub-account. If you cannot disable 2FA for policy reasons, you can add our support address as a delegated administrator with scoped permissions. We can request this level of access, but we do not promise it on every plan because some workspaces have configurations that block it. Either way, sending uses OAuth at the mailbox level. We do not configure SMTP or IMAP credentials, ever. OAuth is the only path that keeps your inboxes within the provider's trust framework, which feeds back into deliverability.

Putting it together: a 30-day domain plan

If you are starting from zero, here is the order of operations. Decide your daily volume target. Pick Google, Outlook, or a mix using the 3 / 100 ratio. Calculate domain count using the math above with 70 to 80 percent ceiling utilization. Choose Standard (your domains) or Pre-Warmed (our domains, faster). Register or order. Authenticate everything (SPF, DKIM, DMARC). Warm for 14 to 30 days minimum if Standard, or skip warmup if Pre-Warmed. Ramp volume gradually. Monitor reply rate and bounce rate per domain. Retire domains showing 30 percent degradation. Replace before you need them. That is the whole loop.

The pieces are not complicated individually. The mistake is treating any one of them as optional. Skip authentication and you bounce. Skip warmup and you spam-folder. Skip rotation and you watch your good domains burn into nothing while your weekly send volume drops by half. Run the loop and the loop runs you. Our process page documents how we deliver this on the operator side so you do not have to assemble it yourself.