Cold Email Infrastructure Checklist: Everything You Need Before Sending Your First Email

By Puzzle Inbox Team · Apr 10, 2026 · 11 min read

The complete cold email infrastructure checklist for 2026. 15 items to verify before your first send so you don't burn domains or land in spam.

Why You Need a Checklist Before Your First Send

Most cold email operations fail in the first 30 days. Not because the copy is bad. Not because the list is bad. The infrastructure wasn't ready. Someone bought 10 inboxes, connected them to Instantly, loaded a list, and hit send. Two weeks later their domains are burned and they're starting over.

This checklist is the 15 items you verify before a single email goes out. Miss one and you're gambling with your sender reputation. Hit all 15 and your first campaign lands in inboxes, not spam folders.

The 15-Item Cold Email Infrastructure Checklist

1. Domains Purchased (Separate From Main Brand)

Buy 2 to 3 secondary domains for cold email. Never send cold email from your primary business domain. If deliverability crashes, you burn the domain your customers rely on. Typical names: yourbrand-outreach.com, getyourbrand.com, hello-yourbrand.com. Budget: $12 to $40 per domain per year.

Verification: Each domain resolves, WHOIS shows current ownership, no spam history on MXToolbox blacklist check.

2. Domain Age Confirmed (30+ Days Minimum)

Fresh domains registered yesterday perform worse than domains with 30+ days of age. Some providers sell aged domains specifically for cold email. At minimum, register domains 30 days before you plan to send.

Verification: WHOIS creation date is 30+ days old. Domain is indexed in Google for basic queries.

3. SPF Record Published Correctly

SPF tells receiving servers which IPs are authorized to send from your domain. Wrong SPF means your emails get flagged as spoofed.

Verification: Run your domain through MXToolbox SPF lookup. Should return a valid record including Google (_spf.google.com) or Microsoft (spf.protection.outlook.com) depending on your provider. No more than 10 DNS lookups in the SPF chain.

4. DKIM Signing Active

DKIM cryptographically signs every outbound email. Missing DKIM is the fastest way to land in spam.

Verification: Send a test email to a Gmail address. Check the message headers for "DKIM-Signature" with "dkim=pass". If it says dkim=fail or the header is missing, fix before sending more.

5. DMARC Record Set to p=quarantine or p=reject

DMARC is the policy that tells receiving servers what to do when SPF or DKIM fails. For cold email, set p=quarantine minimum. Gmail started requiring DMARC for bulk senders in 2024.

Verification: DNS TXT record at _dmarc.yourdomain.com shows v=DMARC1; p=quarantine; rua=mailto:reports@yourdomain.com.

6. MX Records Pointing to Your Email Provider

If MX records are wrong, you can't receive replies. Receiving replies is how you book meetings.

Verification: MXToolbox MX lookup returns Google Workspace MX records (smtp.google.com priority 1) or Microsoft 365 records (yourdomain-com.mail.protection.outlook.com). No leftover records from previous hosts.

7. Inboxes Provisioned (Google and/or Outlook)

Decide on Google, Outlook, or both. Google Workspace handles 12 cold emails per inbox per day safely. Outlook handles 3 per inbox per day. Figure your daily volume target and reverse-engineer the number of inboxes you need.

Verification: You can log into every inbox, send a test email, and receive a test reply. Two-factor authentication disabled or configured with app passwords for SMTP/IMAP connection.

8. Maximum 3 Inboxes Per Domain

Three inboxes per domain is the practical ceiling. More than that looks suspicious to Google and Microsoft. If you need 30 inboxes, you need at least 10 domains.

Verification: Count inboxes per domain. If any domain has more than 3, redistribute across additional domains.

9. Warmup Complete (14+ Days) or Pre-Warmed Delivered

Every inbox needs 14+ days of gradual sending before you start cold email. This builds sender reputation with Gmail and Outlook spam filters. Pre-warmed inboxes skip this step because the warmup already happened before delivery.

Verification: If using a warmup tool, 14+ days of activity logged and reputation score showing green. If pre-warmed, your provider confirms the warmup period was completed.

10. Sending Platform Connected (Instantly, Smartlead, etc.)

Your sending platform handles sequences, inbox rotation, and reply tracking. Every inbox needs to be connected via OAuth (Google) or SMTP/IMAP (Outlook).

Verification: Send a test campaign of 5 emails to your own addresses. All 5 send successfully. Replies register in the platform.

11. Inbox Rotation Configured With Per-Inbox Limits

Set per-inbox daily limits inside your sending platform. Google inboxes: 12 emails per day max. Outlook: 3 per day max. Rotation distributes volume evenly.

Verification: Campaign settings show per-inbox limit set correctly. Rotation toggle is on. Test campaign distributes emails across inboxes, not concentrated on one.

12. Email Verification Set Up (ZeroBounce, NeverBounce, or MillionVerifier)

Unverified lists bounce at 5%+. Verified lists bounce under 1%. Bounces destroy sender reputation.

Verification: Your list has been run through a verifier. Invalid, disposable, and role-based (info@, sales@) addresses removed.

13. List Ready (ICP-Targeted, Properly Segmented)

Bad list targeting wastes the best infrastructure. Target one narrow ICP per campaign. Not "all SaaS founders" but "seed-stage B2B SaaS founders, 10 to 50 employees, raised Series Seed in the last 12 months."

Verification: You can articulate your ICP in one sentence. Every contact on the list matches that sentence. List is under 5,000 contacts for the first campaign.

14. Copy Approved (Under 100 Words, No Links, Plain Text)

First email rules: under 100 words, no links, plain text only. HTML emails trigger spam filters on cold audiences.

Verification: Word count is under 100. No URLs. No attachments. Subject line is 3 to 5 words. A second person has read the copy and confirmed it doesn't sound generic.

15. Reply Handling Configured

Replies need to reach a human who can respond within 24 hours. If replies sit for days, you lose meetings you already won.

Verification: Unified inbox set up (most sending platforms include this). Someone on the team owns reply monitoring. SLA for positive replies: under 24 hours.

What Happens If You Skip Steps

Skip DMARC: 30% of your emails land in spam on Gmail alone. Skip warmup: sender reputation craters in week 1. Skip verification: 5% bounce rate destroys your domain within two weeks. Skip ICP targeting: 0.5% reply rate instead of 3%.

Every item on this list exists because skipping it destroyed someone's infrastructure in a way that was painful and expensive to fix.

Pre-Launch Test Campaign

Before loading your real list, run a test campaign of 20 emails to coworkers, yourself, and friends. Verify: emails land in primary inbox (not spam or promotions), DKIM passes in headers, SPF passes, your signature renders correctly, replies route back to your inbox.

If the test campaign reveals any issues, fix them before the real launch. Don't test on your real list.