SOPs 12 min read

New Domain Provisioning SOP: From Purchase to First Cold Email (Step by Step)

The exact sequence for standing up a new cold email domain — registrar settings, DNS, authentication, inbox creation, warmup, and the go/no-go checks before the first real send.

Most burned domains were burned in the first two weeks — not by bad copy, but by skipped setup steps and premature volume. This SOP is the full provisioning sequence we recommend for every new cold email domain. Follow it in order; the ordering matters.

Phase 1: Domain purchase (Day 0)

  • Buy a variation of your main domain, never send cold email from the primary. getcompany.com, trycompany.com, company.io are standard patterns.
  • Stick to .com where possible. Exotic TLDs (.xyz, .top, .click) carry baseline spam suspicion.
  • Check the domain's history before buying. Run it through a blacklist check — previously-abused domains come pre-burned.
  • Set the domain to auto-renew and verify with the domain expiry checker. Registrar privacy on.

Phase 2: DNS and authentication (Day 0–1)

Do all of this before creating a single inbox.

DNS setup checklist

  • Set up hosting/redirect: root domain should 301 to your main website — verify with the redirect checker
  • Add MX records for your email provider (Google Workspace or Microsoft 365) — verify with the MX checker
  • Publish SPF: v=spf1 include:_spf.google.com -all (or your provider's include) — verify with the SPF tool
  • Enable DKIM in the provider admin console with a 2048-bit key — verify with the DKIM checker
  • Publish DMARC: start with v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com, upgrade to p=quarantine after 2 clean weeks — verify with the DMARC lookup
  • Set up a custom tracking domain (CNAME, DNS-only, valid SSL) — verify with the tracking domain checker

Order matters: authentication before inboxes, inboxes before warmup, warmup before campaigns. Every shortcut here is repaid with interest as a deliverability problem in weeks 3–6.

Phase 3: Inbox creation (Day 1–2)

  • 2–3 inboxes per domain, maximum. More inboxes per domain concentrates risk and looks unnatural.
  • Use real human names (sarah@, james.t@) — not sales@, info@, or outreach@.
  • Complete every profile: photo, signature, timezone. Send a few manual emails to colleagues and reply to them.
  • Use the inbox count calculator to size total infrastructure against your monthly lead targets.

Phase 4: Warmup (Weeks 1–4)

New inboxes need 3–4 weeks of gradually increasing, engagement-positive activity before they can carry campaign volume. Enable warmup in your sending platform and follow a ramp like:

  • Week 1: 5–10 warmup emails/day per inbox
  • Week 2: 15–20/day, replies enabled
  • Week 3: 25–35/day, begin mixing 5–10 real sends/day
  • Week 4: 40/day warmup, ramp real sends toward 20–30/day

Full detail in the warmup guide, and the warmup readiness checker tells you if you're actually ready to send.

The 3–4 week problem — and the shortcut that actually works

The warmup period is the single biggest bottleneck in cold email operations. If you're replacing burned infrastructure or onboarding a client who needs to launch now, a month of dead time is often commercially unacceptable. This is the legitimate use case for buying pre-warmed infrastructure: providers like WarmInboxes sell inboxes on domains that have already been through a proper warmup cycle, so you can be sending real campaigns within days instead of weeks. Run the warmup time-saved calculator to compare the economics for your volume.

Phase 5: Go/no-go verification (before first campaign send)

Launch gate — all must pass

  • SPF, DKIM, DMARC all pass — run the all-inclusive deliverability test for a single warm score
  • Zero blacklist listings
  • Placement test lands in the Gmail primary inbox
  • Tracking domain resolves with valid SSL
  • Inboxes have 3+ weeks of warmup history (or came pre-warmed)
  • Sending limits configured: max 30–50 cold sends/inbox/day, ramped, with 2–5 minute randomized gaps
  • List verified — expected bounce rate under 3%

If any item fails, fix it before sending. A campaign launched through a failed gate doesn't just underperform — it damages the asset you spent four weeks building. And keep one rule permanent: your main company domain never sends cold email. Ever.

Run the checks first

Before replacing anything, run a free inbox placement test. You might find the issue is DNS, not the domain — and save yourself a week of unnecessary work.

Free inbox placement test Check burn score

More guides

The Weekly Deliverability Monitoring SOP (Copy This Into Your Agency Playbook)Inbox Rotation SOP: How to Rotate Sending Accounts Before They BurnAgency Client Onboarding SOP: The Deliverability Audit That Prevents Week-3 Fires