I manage 3,000+ cold email domains at MailDeck, delivering 50M+ emails monthly for 1,631+ clients with 98% inbox placement. The domain you choose determines 60% of your deliverability outcome before you write a single word of copy. Based on Q2 2026 MailDeck platform data, 10-20% of cold email domains burn every month at enterprise scale (100K+ emails per month). Choosing the right domain from the start reduces burn rate, cuts replacement costs, and extends your domain lifespan from 45 days to 2+ months under active load.
This guide covers every decision in cold email domain selection: TLD choice, naming conventions, how many domains you need by inbox type, aged vs fresh domains, and registrar comparison. Every recommendation comes from managing real infrastructure at scale.
Why Your Cold Email Domain Choice Matters More Than Your Copy
Your sequencer is a scheduler. Your domain is your identity to every receiving server on the internet. Inbox providers evaluate domain reputation, domain age, TLD trust signals, and DNS authentication before they read a single word of your email body.
Across MailDeck's 3,000+ managed domains, domains with proper TLD selection, clean naming, and correct authentication hit 98% inbox placement from day one. Domains with suspicious naming patterns, low-trust TLDs, or misconfigured DNS records start at 60-70% placement and decline from there.
| Domain Factor | Impact on Deliverability | Can You Fix It Later? |
|---|---|---|
| TLD selection (.com vs .info) | High - determines baseline trust | No - requires new domain purchase |
| Domain name pattern | Medium - affects spam filter scoring | No - requires new domain purchase |
| Domain age | Medium - affects warmup speed | Only with time |
| DNS authentication (SPF, DKIM, DMARC) | Critical - pass/fail gate | Yes - fixable in minutes |
| Domain reputation | Critical - built over weeks | Yes - but slow to rebuild |
The first two factors are locked at purchase. Everything in this article helps you make those irreversible decisions correctly.
How to Choose the Best TLD for Cold Email
The TLD (top-level domain) is the extension after your domain name: .com, .io, .net. Inbox providers assign different baseline trust levels to different TLDs because spam volume varies dramatically across extensions.
Recommended TLDs for Cold Email
Across 3,000+ domains under management at MailDeck, these TLDs consistently deliver the strongest inbox placement rates. Based on Q2 2026 platform data.
| TLD | Trust Level | Avg. Cost/Year | Best For | Notes |
|---|---|---|---|---|
| .com | Highest | $10-15 | All campaigns | Gold standard. Highest recognition, highest trust. Always the first choice. |
| .co | High | $8-12 | Brand variations | Clean, professional. Easy to create variations of your primary domain. |
| .net | High | $10-14 | Secondary domains | Widely accepted by all inbox providers. Strong fallback when .com is taken. |
| .io | High | $30-50 | Tech/SaaS companies | Higher cost deters spammers, which keeps the TLD's reputation clean. |
| .dev | High | $12-18 | Developer tools, SaaS | Google-operated TLD with enforced HTTPS. Strong trust signal. |
| .pro | Medium-High | $8-12 | Professional services | Underused TLD with clean reputation. Good for consultants and agencies. |
| .one | Medium-High | $8-15 | Brand variations | Growing adoption, clean reputation across ESPs. |
TLDs to Avoid for New Cold Email Domains
| TLD | Why to Avoid |
|---|---|
| .info | Deliverability has been declining across major ESPs. High spam association. |
| .help | Same declining deliverability trend as .info. |
| .xyz | Heavy spam abuse. Some inbox providers apply stricter filtering by default. |
| .top | One of the most spam-abused TLDs globally. Immediate trust deficit. |
| .click, .link | Frequently used in phishing. Triggers automated security filters. |
If you already own domains on these TLDs and they have clean sending history, keep using them. Domain age and established reputation outweigh TLD trust. The recommendation is specifically about new purchases.
The TLD Diversification Principle
When you run multiple cold email domains (and you should), spread them across 2-3 different TLDs. If one TLD experiences a reputation decline at the provider level, your entire domain portfolio is affected when every domain shares the same extension.
Ecom DTC client running 40 domains for multiple campaigns initially registered all 40 as .com domains. When they needed to scale to 60 domains, available .com variations of their brand became increasingly forced and unnatural-looking. Diversifying across .com, .co, and .net gave them clean, professional naming options and reduced single-TLD concentration risk.
Cold Email Domain Naming Conventions: What Works and What Gets Flagged
The domain name itself is the second irreversible decision. Inbox providers and spam filters evaluate naming patterns. A domain that looks like a real business passes. A domain that looks generated or deceptive gets flagged before it sends a single email.
Naming Patterns That Work
Your cold email domain variations should be visually connected to your primary brand. Recipients who Google your domain should find something that makes sense.
| Pattern | Example (brand: acmesales.com) | Trust Level |
|---|---|---|
| Prefix: get/try/use/meet/hello | getacmesales.com | High |
| Suffix: hq/team/mail/app | acmesaleshq.com | High |
| Word reorder | salesbyacme.com | Medium-High |
| Shortened brand | acmesl.com | Medium |
| Different TLD, same name | acmesales.co | High |
| Descriptive variation | acmeoutbound.com | Medium-High |
The best domain for cold email looks like a legitimate business domain that a real company would use for outreach. The key test: would this domain look normal in someone's inbox?
Naming Patterns to Avoid
| Pattern | Example | Why It Gets Flagged |
|---|---|---|
| Numbers in domain | acme123sales.com | Phishing fingerprint. Automated filters flag number insertion. |
| Hyphens | acme-sales-team.com | Multiple hyphens are a known spam signal across all major ESPs. |
| Misspellings of brand | acmesaIes.com (capital I for l) | Spoofing/phishing signal. Immediate blacklist risk. |
| Keyword stuffing | bestcheapsalessoftwaredeals.com | Looks automated. Triggers pattern detection. |
| Unrelated to brand | bluemountaindigital.com | No brand connection. Recipients can't verify who you are. |
How Many Domain Variations Can You Create?
For a typical brand, you can generate 15-25 clean domain variations across recommended TLDs before naming quality starts to degrade.
Here is a practical example. Primary brand: brightpath.com
| # | Domain Variation | TLD |
|---|---|---|
| 1 | getbrightpath.com | .com |
| 2 | brightpathhq.com | .com |
| 3 | trybrightpath.com | .com |
| 4 | meetbrightpath.com | .com |
| 5 | hellobrightpath.com | .com |
| 6 | brightpath.co | .co |
| 7 | getbrightpath.co | .co |
| 8 | brightpathhq.co | .co |
| 9 | brightpath.net | .net |
| 10 | getbrightpath.net | .net |
| 11 | brightpath.io | .io |
| 12 | brightpath.dev | .dev |
| 13 | brightpath.pro | .pro |
| 14 | brightpathteam.com | .com |
| 15 | brightpathmail.com | .com |
At 15+ domains, you have enough capacity for 100K+ cold emails per month depending on inbox type (see volume math below).
How Many Domains Do You Need for Cold Email?
This is the most common question we hear from new clients. The answer depends entirely on which inbox type you use, because each type has different send limits per domain.
Cold Email Sending Volume Math by Inbox Type
MailDeck manages three inbox types. Each has different inboxes-per-domain ratios and safe send limits. This creates dramatically different domain requirements for the same send volume target. Based on Q2 2026 MailDeck platform data.
| Inbox Type | Sends/Day/Inbox | Inboxes/Domain | Sends/Day/Domain | Sends/Month/Domain |
|---|---|---|---|---|
| Google Workspace | 18-22 (avg 20) | 5 | ~100 | ~2,000 |
| Outlook Premium | 8-10 (avg 9) | 100 | ~900 | ~18,000 |
| Outlook Normal | 3-5 (avg 4) | 100 | ~400 | ~8,000 |
| Private SMTP | 11-14 (avg 12) | 5 | ~60 | ~1,300 |
One Outlook Premium domain produces the same monthly send volume as 9 Google Workspace domains. This is why Outlook anchors most high-volume stacks at 50% of total capacity.
Domains Needed by Monthly Send Volume
MailDeck's Diversification Stack plans combine Outlook Premium, Private SMTP, and Google Workspace under one provider. Each plan specifies exact domain requirements. These are the official configurations from the MailDeck platform as of Q2 2026.
| Plan | Cold Sends/Month | Outlook Premium | SMTP | Google Workspace | Total Domains | Price |
|---|---|---|---|---|---|---|
| Starter | 40,000 | 2 tenants (2 domains) | 10 inboxes (2 domains) | 5 accounts (1 domain) | 5 domains | $99/month |
| Growth | 215,000 | 10 tenants (10 domains) | 100 inboxes (20 domains) | 30 accounts (6 domains) | 36 domains | $399/month |
| Enterprise | 2,150,000 | 100 tenants (100 domains) | 1,000 inboxes (200 domains) | 300 accounts (60 domains) | 360 domains | $3,499/month |
| Custom | 1M+ | Custom | Custom | Custom | Custom | Contact us |
Every plan includes complete DNS and authentication setup, so domain configuration is handled from day one.
The Reserve Domain Rule
At enterprise scale, 10-20% of cold email domains burn every month. Domain lifespan under active cold email load averages 45 days to 2 months. You need a reserve of 20-25% of your active domain count, warmed and ready to rotate in immediately.
| MailDeck Plan | Active Domains | Reserve Needed (20-25%) | Total Domains to Purchase |
|---|---|---|---|
| Starter | 5 | 1-2 | 6-7 |
| Growth | 36 | 7-9 | 43-45 |
| Enterprise | 360 | 72-90 | 432-450 |
Without reserves, replacing a burned domain takes 7-10 days (purchase + DNS propagation + warmup). With pre-warmed reserves, replacement happens same day.
Cybersecurity firm client sending 200K emails per month across 30 domains lost 5 domains in a single week after a particularly aggressive campaign targeting a segment with low intent. Without reserves, they would have lost 17% of their sending capacity for 10+ days. Because they maintained 8 reserve domains, they swapped all 5 within 24 hours with zero volume interruption.
Aged Domains vs Fresh Domains for Cold Email
Domain age is a trust signal that inbox providers use during reputation evaluation. An aged domain carries existing history that a fresh domain lacks. But age alone is not enough.
How Domain Age Affects Warmup Speed
Across MailDeck's infrastructure, the warmup timeline shifts measurably with domain age.
| Domain Age | Outlook Normal Warmup | Outlook Premium Warmup | Google Workspace Warmup | SMTP Warmup |
|---|---|---|---|---|
| Fresh (0-30 days) | 5-7 days | 3-5 days | 2-3 weeks | 3-4 weeks |
| 3-6 months | 3-5 days | 2-3 days | 10-14 days | 2-3 weeks |
| 6-12 months | 2-3 days | 1-2 days | 7-10 days | 10-14 days |
| 1+ years (clean history) | 1-2 days | Ready faster | 5-7 days | 7-10 days |
Aged domains with clean history reduce time-to-first-send across every inbox type. The impact is most significant on Google Workspace and SMTP, where standard warmup takes 2-4 weeks.
When Aged Domains Backfire
An aged domain with spam history, prior blacklisting, or a bad DMARC record performs worse than a clean fresh domain. Before purchasing any aged domain, run these checks:
- Blacklist check: Query the domain against major blacklists using MXToolbox. Any active listing is a disqualifier.
- Wayback Machine: Check what the domain was previously used for. Gambling, pharma, or adult content sites leave reputation stains that persist.
- Google Safe Browsing: Verify the domain is not flagged as deceptive or harmful.
- DNS history: Check for residual SPF/DKIM/DMARC records from previous owners that could conflict with your setup.
Fresh Domains: The Right Approach
For most teams, purchasing fresh domains and investing in proper warmup is the safer path. Fresh domains start with a neutral reputation. You build trust from a clean baseline with no inherited risk.
The key is patience. Respect the warmup timeline for your inbox type. Cutting warmup short is the single most common reason new domains get flagged within the first month.
| Inbox Type | Minimum Warmup | Recommended Warmup | Warmup Emails/Day | Reply Rate Target |
|---|---|---|---|---|
| Google Workspace | 15 days | 20-25 days | 20-25 | 30-35% |
| Outlook Premium | 3-5 days | 10-14 days | 8-12 | 30-35% |
| Outlook Normal | 5-7 days | 10-14 days | 8-12 | 30-35% |
| Private SMTP | 3-4 weeks | 4-6 weeks | Start at 10-20, ramp gradually | 30-35% |
Best Domain Registrar for Cold Email: Porkbun vs Namecheap vs GoDaddy
Where you buy your domain matters for three reasons: pricing at scale, WHOIS privacy, and DNS management. When you need 10-80+ domains, small per-domain cost differences add up fast.
Registrar Comparison
| Feature | Porkbun | Namecheap | GoDaddy |
|---|---|---|---|
| .com Registration | ~$11/year | ~$10/year (first year) | ~$12/year (first year) |
| .com Renewal | ~$11/year | ~$15/year | ~$22/year |
| WHOIS Privacy | Free (included) | Free (included) | Paid add-on (~$10/year) |
| Bulk Discount | Available | Available at 50+ domains | Available |
| DNS Management | Cloudflare-powered | Built-in | Built-in |
| ICANN Accredited | Yes | Yes | Yes |
| TLD Selection | 400+ | 400+ | 500+ (largest) |
Cost at Scale: 20 Domains (.com)
| Registrar | Year 1 Cost (20 domains) | Year 2 Renewal (20 domains) | 2-Year Total |
|---|---|---|---|
| Porkbun | ~$220 | ~$220 | ~$440 |
| Namecheap | ~$200 | ~$300 | ~$500 |
| GoDaddy | ~$240 | ~$440 | ~$680 |
At 20 domains over 2 years, Porkbun saves ~$240 compared to GoDaddy. At 50+ domains, the difference crosses $600+. WHOIS privacy alone costs $200/year at GoDaddy for 20 domains, while it is included at Porkbun and Namecheap.
Which Registrar to Choose
Porkbun works best for teams buying 10+ cold email domains. Consistent pricing with no renewal surprises, free WHOIS privacy, and Cloudflare-powered DNS make it the lowest-friction option for bulk cold email domain management.
Namecheap is the strongest all-around registrar. Free WHOIS privacy, reliable DNS, and a well-built bulk management interface. Renewal pricing is higher than Porkbun but significantly lower than GoDaddy.
GoDaddy has the largest TLD selection and the most recognizable brand. The trade-off is higher renewal costs and paid WHOIS privacy. For teams managing fewer than 10 domains where variety of TLD options matters, GoDaddy is a reasonable choice.
All three registrars support the DNS records required for cold email: SPF (TXT records), DKIM (TXT/CNAME records), and DMARC (TXT records). The authentication setup process is the same regardless of registrar.
Domain Website Setup: The Step Most Teams Skip
Every cold email domain needs a live website. This is where most teams cut corners, and it costs them deliverability.
Inbox providers check whether a domain has a functioning website. A domain with no website, a parked page, or a generic registrar placeholder is a strong spam signal. Real businesses have real websites.
What Your Cold Email Domain Website Needs
| Element | Required? | Why |
|---|---|---|
| Homepage with company info | Yes | Inbox providers and recipients verify sender legitimacy |
| HTTPS/SSL certificate | Yes | Non-HTTPS domains trigger security warnings |
| Contact page | Recommended | Adds legitimacy signals |
| Consistent branding with primary domain | Recommended | Recipients who investigate your domain should see a real business |
Website Duplication vs Domain Forwarding
Duplicate your primary website onto each sending domain using Cloudflare for hosting. This gives every domain a fully functioning website that matches your brand.
Never use domain forwarding (301/302 redirects) instead of website duplication. Domain forwarding is a known domain farming signal. It tells inbox providers that multiple domains point to the same destination, which is exactly what spam operations do. Google in particular penalizes forwarded domains in sender reputation scoring.
Cold Email Domain Health: What Burns Domains and What Protects Them
Choosing the right domain is step one. Keeping it alive is the ongoing work. At enterprise scale, domain burn is an operating cost you manage, not eliminate.
Domain Burn Thresholds
When any of these thresholds are crossed, the domain is at immediate risk of blacklisting or permanent reputation damage. Based on monitoring data across MailDeck's 3,000+ managed domains.
| Metric | Burn Threshold | Target Range |
|---|---|---|
| Spam complaint rate | Above 0.3% | Below 0.1% |
| Bounce rate | Above 7% | Below 5% |
| Open rate | Below 10% for 7+ days | Above 20% |
| Reputation in Postmaster Tools | "Bad" | "High" or "Medium" |
What Destroys Cold Email Domains
| Behavior | Impact | Recovery |
|---|---|---|
| Sending too fast during warmup | Permanent flag on domain | Often unrecoverable. Replace domain. |
| No spintax on Outlook sends | Pattern detection triggers across receiving servers | Pause, rewrite all copy, resume slowly |
| Links or images in Outlook body | Microsoft pre-delivery scanner flags message | Remove all links/images, pause 48 hours |
| Unverified leads (bounce rate above 5%) | ISP flagging begins immediately | Verify all leads, pause affected domain 72 hours |
| Same list within 90 days with same copy | Spam report spike | Fresh list, fresh angles required |
| Domain forwarding instead of website duplication | Domain farming signal | Switch to full duplication on Cloudflare |
Domain Protection Checklist
Before any domain goes live for cold email, verify every item on this checklist:
- [ ] SPF record configured (single record, ending with -all or ~all, under 10 DNS lookups)
- [ ] DKIM enabled (2048-bit key)
- [ ] DMARC set to p=quarantine or p=reject
- [ ] Full website duplicated on domain (Cloudflare)
- [ ] WHOIS privacy enabled
- [ ] Warmup running on correct pool (Smartlead Premium, Instantly, or Pipl.ai only)
- [ ] Warmup reply rate at 30-35%
- [ ] Lead list verified (bounce rate target below 5%)
- [ ] Send volume randomized +/-15-25%
- [ ] Google Postmaster Tools monitoring active
MailDeck automates SPF, DKIM, and DMARC configuration for all domains. DNS propagation is verified before the first email is sent. Onboarding takes 48 hours for full end-to-end authentication verification, delivering 98% inbox placement from day one. Based on Q2 2026 MailDeck platform data from 833K+ managed inboxes.
Cold Email Domain Selection: Step-by-Step Decision Framework
Here is the complete process condensed into a decision sequence. Follow these steps in order for every domain purchase.
Step 1: Calculate Your Domain Count
Use the volume math table above. Determine your monthly send target, choose your inbox type mix, and calculate how many domains you need. Add 20-25% for reserves.
Step 2: Choose Your TLDs
Start with .com for as many variations as possible. Fill remaining slots with .co, .net, .io, .dev, or .pro. Spread across 2-3 TLDs minimum for diversification.
Step 3: Generate Domain Names
Use your brand name as the base. Apply the naming patterns from the table above: prefixes (get, try, use, meet, hello), suffixes (hq, team, mail, app), or different TLDs of the same name. Generate 15-25 candidates, then filter for professionalism and brand clarity.
Step 4: Check Domain History
For every domain candidate, check:
- MXToolbox blacklist lookup
- Wayback Machine for prior usage
- Google Safe Browsing status
- Existing DNS records from previous owners
Step 5: Purchase from Your Registrar
Buy from Porkbun, Namecheap, or GoDaddy. Enable WHOIS privacy. If buying 10+ domains, use bulk registration tools.
Step 6: Set Up DNS Authentication
Configure SPF, DKIM (2048-bit), and DMARC on every domain before connecting to any sending tool. At MailDeck, this is automated across all managed domains with propagation verification before first send.
Step 7: Duplicate Your Website
Copy your primary website onto every sending domain using Cloudflare. Never use domain forwarding.
Step 8: Connect to Infrastructure and Warm Up
Connect domains to your inbox provider, start warmup on a reputable pool, and respect the warmup timelines for your inbox type. At MailDeck, onboarding takes 48 hours with full DNS verification and 98% inbox placement from day one.
FAQ
How many domains do I need for cold email?
The answer depends on your send volume and inbox type mix. MailDeck's Starter Diversification plan sends 40,000 cold emails per month and requires 5 domains (2 Outlook Premium, 2 SMTP, 1 Google Workspace). The Growth plan scales to 215,000 sends per month across 36 domains (10 Outlook, 20 SMTP, 6 Google). The Enterprise plan reaches 2,150,000 sends per month across 360 domains (100 Outlook, 200 SMTP, 60 Google). Add 20-25% reserve domains on top of your active count to handle monthly domain burn. Based on Q2 2026 MailDeck platform data.
What is the best domain extension for cold email?
.com is the strongest TLD for cold email deliverability. It carries the highest trust signals across every inbox provider. When .com is unavailable, .co, .net, .io, .dev, and .pro all deliver strong inbox placement. Across 3,000+ domains managed at MailDeck, .com consistently outperforms other TLDs in baseline inbox placement rates. Avoid purchasing new domains with .info, .help, .xyz, or .top extensions.
Should I use aged domains for cold email?
Aged domains with clean history reduce warmup time because they carry existing trust signals. Domain age is a stronger trust factor than TLD selection. On MailDeck's Outlook infrastructure, verified clean aged domains reduced warmup by 1-3 days compared to fresh domains. The critical caveat: an aged domain with prior spam activity or blacklisting performs worse than a fresh domain. Always check blacklist history, Wayback Machine archives, and Google Safe Browsing status before purchasing.
Do I need a separate domain for cold email?
Yes. Never send cold email from your primary business domain. At enterprise scale, 10-20% of cold email domains burn every month. If your primary domain gets blacklisted, you lose transactional email, internal communications, and client-facing correspondence alongside your outbound campaigns. Register dedicated domains with naming variations of your brand and reserve your primary domain for business-critical communication only.
What is the best domain registrar for cold email?
Porkbun, Namecheap, and GoDaddy are the three most widely used registrars for cold email domains. For teams buying 10+ domains, Porkbun offers the best cost efficiency: consistent pricing at ~$11/year for .com with no renewal hikes and free WHOIS privacy included. Namecheap is the strongest all-around option with free WHOIS privacy and reliable bulk management. GoDaddy offers the largest TLD selection but charges more on renewals and requires paid WHOIS privacy. All three support the DNS records required for SPF, DKIM, and DMARC authentication.
Methodology
Data in this article is sourced from MailDeck's internal platform data: 3,000+ domains under active management, 833K+ managed inboxes, and 1,631+ global clients across Microsoft 365 Outlook, Google Workspace, and Private SMTP infrastructure. Volume math and send limits are based on observed safe sending thresholds across the platform. Domain burn rates (10-20% monthly at enterprise scale) are based on domain replacement frequency across clients sending 100K+ emails per month. Warmup timelines reflect recommended settings validated across MailDeck's infrastructure.
Registrar pricing is based on publicly listed prices as of April 2026 and may vary by TLD and promotional offers.
All DNS audit data references MailDeck's audit of 1,000+ cold email domains.
Sample size: 1,631+ clients. Time period: Q2 2026.
Limitations: Domain burn rates vary significantly by list quality, copy quality, and sending behavior. The 10-20% monthly burn rate reflects enterprise-scale operations. Teams sending under 50K emails per month typically experience lower burn rates. TLD deliverability performance can shift as inbox providers update their filtering algorithms.
Last updated: April 2026
Ready to Scale Your Email Infrastructure?
Join top outbound teams using MailDeck for enterprise-grade deliverability.
Get Started