COMPLIMENTARY TOOL  //  check any domain's SPF, DKIM, DMARC and MX in seconds Open the checker

INFRASTRUCTURE

Cold email infrastructure in 2026, and why we diversify it

Updated August 2026  //  by Mark Glazer

The short answer:

Cold email infrastructure is the set of sending domains, mailboxes and provider accounts an outbound programme sends from, kept separate from the domain the business runs on. The 2026 answer is not a number of emails per mailbox. It is an architecture: more than one provider, many domains, and many mailboxes each sending very little. We run separate Google Workspace and Microsoft 365 pools so that if one deteriorates, the programme does not stop. The cold email domain generator builds that domain set the same way: names drawn from what the company sells, no word used twice across the fleet, and every candidate checked live against the registry.

Most infrastructure advice is written by companies selling mailboxes, and it stops at "buy domains, buy inboxes, warm them up". This is written from running the fleet, including the day we discovered that 11 of our 16 sending domains had been blocklisted at once because of a naming decision made months earlier. That is what concentration risk looks like when it arrives.

One provider is a single point of failure

An outbound programme that sends entirely from one provider, on one domain pattern, through one reputation environment, has exactly one thing that has to go wrong. Diversification splits that into independent pools that fail separately.

OUTBOUND PROGRAMME one list, one offer, one reply queue GOOGLE WORKSPACE POOL many domains, few mailboxes each MICROSOFT 365 POOL Exchange Online, dense mailboxes SMTP POOL optional third pool SEPARATE SENDING DOMAINS SEPARATE SENDING DOMAINS SEPARATE SENDING DOMAINS LOW-VOLUME MAILBOXES about 10-12 cold sends each per day VERY LOW-VOLUME MAILBOXES about 1-2 each per day, up to ~49 per domain CONTROLLED SENDERS separate provider, separate reputation HEALTH MONITORING, PER POOL REPLIES

Each pool has its own provider, its own domains, its own mailboxes and its own reputation. Placement deterioration in one pool is diagnosed and contained there; the other pools keep operating. This is an operational resilience design, not a way around any provider's rules.

Google Workspace
10-12
cold sends per mailbox per day, our operating choice
A few mailboxes on each of many domains. Google permits far more; we do not use it.
Microsoft 365
1-2
cold sends per mailbox per day, our operating choice
Up to about 49-50 mailboxes on one domain. Volume comes from breadth, never from depth.
SMTP, optional
3rd
independent pool where an architecture calls for one
A different provider and reputation environment, not a deliverability shortcut.
01

Why not just use Google?

Because every risk in cold email is correlated inside a single provider. A reputation problem, a policy change, an authentication failure or a domain-level listing does not politely affect one mailbox. It affects the environment those mailboxes share.

If the whole programme sends through one provider on one domain pattern, then a single deterioration event takes the whole programme offline at once. Split across independent pools, the same event costs a slice of capacity while the rest keeps running, and it gives you something far more valuable than redundancy: a comparison. When one pool's placement drops and the others hold steady, the problem is that pool. When all three drop together, the problem is the list, the offer or the copy. A single-pool programme cannot tell those apart.

WHAT CONCENTRATION COST US

11 of 16 sending domains were listed on a public abuse blocklist at the same time, all sharing one name stem. 87.7% of one campaign's bounces and every one of 22 gateway blocks in a sample traced back to those domains rather than to the recipients. The domains were technically separate. The pattern was not, and the pattern is what got matched.

Diversification is an operational resilience strategy. It is not a way to evade a provider's enforcement, and anyone selling it that way is selling you a future outage. Every pool authenticates properly, sends conservatively and gets retired when it deteriorates.

02

The Google Workspace pool

We run roughly 10 to 12 cold sends per Google Workspace mailbox per day. That is ReplyLead's operating choice, not a limit Google publishes and not a recommendation Google makes about cold email. Google's documented limits are far higher, and the gap between them is the entire point of this section.

WHAT GOOGLE ACTUALLY PERMITS

A paid Google Workspace account may send to 10,000 recipients per day, of which 3,000 may be external. A trial account is capped at 500. A single message may address 2,000 recipients, at most 500 of them external. Exceeding the limit blocks sending for up to 24 hours.
Source: Google Workspace Admin Help, "Gmail sending limits in Google Workspace".

Our 10 to 12 is roughly 0.4% of the external ceiling Google allows. A technical limit describes what the platform will accept before it stops you. It says nothing about what a receiving provider will place in an inbox, and treating it as a volume target is the most common way an outbound programme destroys its own domains.

The Google pool is shaped wide rather than deep: a small number of mailboxes on each of a large number of domains. Losing one domain costs a small, bounded slice of capacity. Per-mailbox volume never rises to absorb the loss; the mailbox count does.

The detailed volume arithmetic, including how to work backwards from a target number of conversations to a mailbox count, lives on how many cold emails you can send per day.

03

The Microsoft 365 pool, and why it is a different architecture

The second pool runs on Microsoft 365 mailboxes served by Exchange Online. It is worth being precise about the terminology, because these names are not interchangeable: this is Microsoft 365 with Exchange Online as the mail service, connected over OAuth. It is not Azure Communication Services, which is Microsoft's separate bulk-email product, and it is not a generic SMTP relay.

We run roughly 1 to 2 cold sends per Microsoft mailbox per day - an order of magnitude below the Google pool, not a rounding difference. In exchange, a single domain in this pool may carry around 49 to 50 mailboxes. Many mailboxes each sending almost nothing produces a materially different risk profile from a few mailboxes each sending steadily, even at the same total volume.

WHAT MICROSOFT ACTUALLY PERMITS

Exchange Online allows 10,000 recipients per day per mailbox and 30 messages per minute, with up to 1,000 recipients on a single message.
Source: Microsoft Learn, "Exchange Online limits" service description.

Microsoft also applies controls above the mailbox, not only on it. The Tenant External Recipient Rate Limit caps how many external recipients an entire tenant may send to in a 24-hour sliding window, and Microsoft's documentation states that this limit depends on the number of licences the tenant has. Mail from default onmicrosoft.com domains is throttled separately, to 100 external recipients per organisation in a rolling 24 hours.

Mailbox-level distribution is not tenant-level limit evasion. That is the distinction worth holding onto. Spreading activity across more mailboxes, or across more domains inside the same tenant, does not by itself lift a tenant-wide external-recipient control - the capacity that applies is governed by Microsoft's own licensing and tenant rules, not by how many inboxes sit inside it. What many low-volume mailboxes do buy is sender reputation spread across many senders instead of concentrated in a few. That is why this pool runs at 1 to 2 cold sends per mailbox per day: it is our operating choice about reputation, made inside whatever capacity Microsoft's rules allow, and never a technique for exceeding it.

MICROSOFT'S OWN POSITION, QUOTED

"Exchange Online customers who need to send legitimate bulk commercial email (for example, customer newsletters) should use third-party providers that specialize in these services."

Microsoft separately points high-volume external senders at Azure Communication Services. We take the first half of that guidance seriously - Exchange Online is not a bulk platform and we do not operate it as one - which is exactly why the per-mailbox number in this pool is 1 to 2 rather than 40.

04

SMTP as a third pool

A dedicated SMTP sending service can act as a third independent pool. Its value in this design is provider diversity: different infrastructure, a different IP environment, a different reputation that deteriorates on its own schedule rather than in step with your mailbox providers. Where an architecture needs a pool that fails independently of both Google and Microsoft, that is the role it fills.

Two honest caveats. SMTP does not inherently deliver better than a provider mailbox, and anyone claiming otherwise is describing a sales page rather than a measurement. And a third pool is only worth adding when it is genuinely independent - a pool that shares its reputation environment with one you already run adds cost and no resilience.

We currently run the Google and Microsoft pools. SMTP is described here as a component of a diversified design, not as something in our own live configuration.

05

Domains: never the main one, and never one pattern

Your primary domain never sends cold email. That rule has no exceptions. Cold email carries bounce risk, complaint risk and listing risk, and if the domain your business runs on absorbs that, you lose the mail the business depends on: invoices, support threads, password resets, replies from customers.

Everyone knows to buy several sending domains. Far fewer people think about what those domains are called, and that is where our expensive mistake happened. We bought a set built on obvious variations of one brand word. Tidy, easy to manage, and instantly recognisable as a pattern - which is precisely the problem, because a pattern legible to you is legible to a filter.

What we did yourbrand-outreach.comyourbrandmail.comyourbrandhq.comgetyourbrand.com One stem, one pattern, one listing away from all of them going down together.
What to do instead thehiringmemo.copipelinenotes.comrevenuecadence.cofoundersbrief.com Different stems, different registrars where practical, different registration dates. No single pattern to match on.

The rule: if you can describe your domain set in one sentence, so can a filter. Vary the stem, not just the suffix - and vary it across pools too, so a Google-pool pattern and a Microsoft-pool pattern do not share a signature.

Where aged domains fit

Buying established domains - registrations that are already many years old, sometimes fifteen or twenty - is one further axis of diversification available to a programme, and worth naming because most infrastructure content ignores it. A pool built entirely on domains registered last month is uniform in a way that a mixed-age pool is not.

Two things we will not claim, because we cannot evidence them: that aged domains inbox better, and that any provider grants them additional trust. Neither is something we have measured, and both are asserted constantly by people selling aged domains. The defensible statement is narrower and still useful: an outbound programme does not have to depend exclusively on newly registered sending domains, and diversity of registration age is one more way a pool avoids looking like a single batch.

06

Warmup, briefly

A new mailbox on a new domain has no sending history, and receivers treat unknown senders with suspicion by default. Plan on two to three weeks of warmup before real campaign volume, and keep a lighter warmup running underneath live sending rather than switching it off the day you start. Domain age matters separately from mailbox age, so buy sending domains before you need them and let them sit.

The full ramp, what warmup does and does not fix, and how to run it under live campaigns is on email warmup.

HOW WE JUDGE READINESS

We do not treat a domain's performance as meaningful until it has sent at least 50 messages and has been sending for at least 21 days, measured from its true first campaign send rather than its registration date. Below that threshold there is not enough signal to judge, and acting on it produces false verdicts in both directions.

07

Authenticate every domain in every pool

Every sending domain needs SPF, DKIM and DMARC before its first send, in every pool. This is no longer a best practice; it is an entry requirement at both major receivers, and the thresholds are published.

ReceiverThresholdRequiredIn force since
Gmailmore than 5,000 messages a day to GmailSPF and DKIM, plus DMARC on the sending domain; one-click unsubscribe on marketing mail; spam rate below 0.3% in Postmaster Tools, with Google recommending below 0.10%1 February 2024
Outlook.commore than 5,000 messages a day to Outlook.comSPF, DKIM and DMARC, aligned, with at least p=none. Non-compliant mail is routed to Junk, then rejected outright with 550 5.7.5155 May 2025

The trap is assuming that what you configured is what is live. SPF in particular fails silently: the specification allows a maximum of 10 DNS lookups per evaluation, every include costs at least one and usually more, and crossing the limit turns the whole record into a permanent error. Your DNS panel will show the record sitting there looking perfectly correct.

Build the records with the SPF and DMARC generator, which counts lookups as you add providers, then confirm what is actually resolving with the deliverability checker. When a message goes wrong, the header analyzer shows what the receiver actually saw.

08

Monitor each pool separately, and retire on bounce rate

Diversification only pays if you can tell which pool is deteriorating. Health has to be tracked per pool, per domain and per mailbox, because each of those levels fails differently and only one of them is worth acting on at the mailbox level.

It is tempting to look at a mailbox with one reply next to a neighbour with six and conclude the first is finished. That conclusion is almost always wrong. Sending platforms distribute volume across the mailboxes on a domain, so any individual mailbox's reply count is a small sample of a shared pool. Per-mailbox reply rate is noise. Reply performance is a property of the domain, the copy and the list. Bounce rate is the opposite: deliverability is genuinely mailbox-specific, so one mailbox with a high bounce rate is a real, isolated problem worth acting on even when its domain is healthy.

SignalJudge at which levelAction
Bounce rateMailboxReplace that mailbox above roughly 5% on meaningful volume
Reply rateDomainInvestigate copy, list and domain reputation, not the mailbox
Days since any replyDomainEstablished domain silent for weeks means reputation decay
Blocklist or a 550 naming your domainDomainRetire the whole domain, not individual mailboxes
Placement deterioration across many domains at oncePoolReduce or pause that pool, diagnose it, keep the other pools running

We run this as a daily snapshot so deterioration shows up as a trend rather than a surprise. A domain whose reply rate is drifting down over two weeks is a far more useful signal than any single day's number. And when a whole pool moves while the others hold, the diversified architecture has just told you something a single-provider setup never could.

The operator's version

01Do not concentrate an outbound programme in one provider, one domain strategy or one reputation environment.
02Run separate pools. Google Workspace at roughly 10-12 cold sends per mailbox per day.
03Microsoft 365 on Exchange Online at roughly 1-2 per mailbox per day, with up to about 49-50 mailboxes on a domain. Reputation spread, not extra tenant capacity.
04A provider's technical limit is not a volume recommendation. Google permits 3,000 external recipients a day; we send 10-12.
05Main domain never sends. Vary the domain stem, not just the suffix, and vary it across pools.
06SMTP and aged domains are options for adding independence, not deliverability shortcuts.
07SPF, DKIM and DMARC on every domain in every pool, then verify what actually resolves.
08Monitor per pool. Retire on bounce rate, which is mailbox-specific. Ignore per-mailbox reply counts entirely.

Questions people actually ask

What is cold email infrastructure?

Cold email infrastructure is the collection of sending domains, mailboxes and provider accounts that an outbound programme sends from, kept deliberately separate from the domain a business runs its normal mail on. It covers which providers the mailboxes live with, how many domains carry them, how many mailboxes sit on each domain, how each domain is authenticated with SPF, DKIM and DMARC, and how sending reputation is monitored and retired.

What is cold email infrastructure diversification?

Infrastructure diversification means spreading an outbound programme across more than one sending provider, more than one domain strategy and more than one reputation environment, so that no single failure can stop the whole programme. In practice that means separate pools - for example a Google Workspace pool and a Microsoft 365 pool - each with its own domains, its own mailboxes and its own health monitoring. If one pool deteriorates it can be identified, reduced or paused and diagnosed while the other pools keep operating.

How many cold emails does ReplyLead send per Google mailbox in 2026?

Approximately 10 to 12 cold emails per Google Workspace mailbox per day. That is ReplyLead's operating choice rather than a Google recommendation. Google's own documented limit for a paid Workspace account is 3,000 external recipients per day, so we run at roughly 0.4% of what the platform permits, and we scale total volume by adding mailboxes rather than by raising that number.

Why does ReplyLead use different sending providers?

To remove single points of failure and to make diagnosis possible. Risks inside one provider are correlated: a reputation problem, a policy change or a domain-level listing affects the whole shared environment at once. Running independent pools means a deterioration event costs a slice of capacity instead of the entire programme, and comparing pools tells you whether a drop is an infrastructure problem or a list, offer or copy problem. It is a resilience strategy, not a way to evade any provider's rules.

How does Microsoft's architecture differ from Google's for cold email?

The binding constraint sits at a different level. On Google Workspace, sending headroom is largely a per-mailbox property: a paid account may send to 3,000 external recipients a day. On Microsoft 365 with Exchange Online, a mailbox may address 10,000 recipients a day, but Microsoft also applies a Tenant External Recipient Rate Limit that caps external recipients across the entire tenant in a rolling 24 hours, a limit Microsoft says depends on the number of licences the tenant has. Adding mailboxes or domains inside the same tenant does not by itself lift that tenant-level control, so the design is not a way of manufacturing capacity - it spreads sender reputation across many senders. ReplyLead's operating choice is roughly 1 to 2 cold sends per mailbox per day, with up to about 49 to 50 mailboxes on a single domain. Those are our choices, not Microsoft recommendations.

Should cold email use multiple domains?

Yes, and the reason is containment rather than volume. Reputation, blocklisting and authentication failures are domain-level events, so a programme on one sending domain has one thing that can take it entirely offline. Multiple domains cap the loss from any single event. The domains must also differ in name pattern: a set of domains built on obvious variations of one word is a pattern a filter can match, which is how 11 of our own 16 sending domains ended up listed at the same time.

What role do aged domains play in cold email infrastructure?

Aged domains - registrations already many years old - are one optional axis of diversification, so that a sending pool is not composed entirely of domains registered in the same recent batch. They are not a deliverability shortcut. There is no evidence we are willing to publish that aged domains achieve better inbox placement or that any provider grants them additional trust, and claims to that effect usually come from people selling them. Registration-age diversity is a structural benefit, not a placement one.

What role can SMTP play in cold email infrastructure?

A dedicated SMTP sending service can act as a third independent pool alongside provider mailboxes, contributing a different infrastructure and IP environment whose reputation deteriorates on its own schedule rather than in step with Google or Microsoft. Its contribution is independence, not better deliverability - SMTP does not inherently place better than a provider mailbox. It is only worth adding when the pool is genuinely independent of the ones already running.

Why shouldn't all outbound infrastructure depend on one provider?

Because a single provider makes every risk in the programme correlated and gives you no way to diagnose a problem. One reputation event, policy change or domain-level listing inside that environment can stop all sending at once, and when placement drops you cannot tell whether the cause is the infrastructure or the campaign. Independent pools convert a total outage into a partial one and give you a control group to compare against.

Can I recover a blocklisted domain?

Sometimes, through the blocklist's delisting process, but treat recovery as a bonus rather than a plan. Reputation recovery is slow and uncertain. The cheaper move is usually to retire the domain and replace it, which is why domain naming diversity matters so much: it caps how much you lose at once.

How much should this cost?

Domains are a few dollars a year each. Mailboxes are the real cost and scale roughly linearly with volume, and a diversified architecture costs more than a single-provider one because you are deliberately paying for capacity you are not maximising. We publish our full modelled infrastructure cost by volume tier on the agency cost page and in the ROI calculator.

We build and run this for clients

Separate provider pools, domains, mailboxes, warmup, authentication and the per-pool monitoring that catches deterioration before it becomes a listing. On a revenue-share model, so we carry the cost of getting it right.

Apply to work with us

How many per day  //  Cold email deliverability guide  //  Email warmup  //  Why verified lists bounce  //  Free tools