Documentation · Infrastructure

Your primary domain never touches cold outreach.

Deliverability failure is the most common way DIY cold email breaks. Here is exactly how Deligatr protects your domain reputation and keeps outreach landing in the inbox, not spam.

Quick answer

Deligatr protects deliverability by never sending cold outreach from your primary domain, using dedicated sending domains authenticated with SPF, DKIM, and DMARC, warming them gradually over roughly two to three weeks before full campaign volume, capping send limits conservatively, and monitoring domain health continuously. LinkedIn accounts follow the same conservative-ramp principle to avoid platform restrictions.

Six principles

How we keep outreach out of spam

01

Isolate the primary domain

Cold outreach never touches the domain used for your customer communication, invoicing, or internal email. Dedicated sending domains absorb all deliverability risk instead.

02

Authenticate before sending

SPF, DKIM, and DMARC are configured on every sending domain before warm-up begins, the technical baseline inbox providers check before trusting a sender.

03

Warm gradually, never rush

New domains send low, authentic volume for roughly two to three weeks before carrying full campaign load. Skipping this step is the single most common cause of deliverability failure.

04

Cap volume per inbox

Sending limits per inbox and per domain are set conservatively, prioritising long-term inbox placement over short-term volume.

05

Monitor continuously, not periodically

Deliverability health is checked on an ongoing basis. If a domain shows early warning signs, volume shifts away from it immediately rather than waiting for a full failure.

06

Ramp LinkedIn conservatively

Connection requests and messages stay within safe daily limits, growing gradually rather than maximising volume from day one, protecting the account long term.

What warm-up actually looks like

A domain earns trust gradually

Week 1

Registration and authentication

New domains registered, SPF, DKIM, and DMARC configured, mailboxes created. No campaign sending yet.

Week 1-2

Low-volume authentic sending

Small volumes of genuine, varied email activity build initial sender reputation with inbox providers.

Week 2-3

Gradual volume increase

Sending volume increases incrementally as deliverability metrics confirm the domain is trusted.

Week 3+

Full campaign capacity

The domain is ready for full outreach volume, monitored continuously from this point forward.

A real example

Recovering from a fully blacklisted domain

A SaaS founder came to Deligatr with a primary domain blacklisted after running self-managed cold email without proper warm-up. The domain was fully quarantined, three new domains were registered and authenticated, and a 21-day warm-up schedule began with zero campaign sending in week one.

By week three, deliverability testing showed a 97% inbox placement rate across the new domains, and the original domain has not been used for outreach since.

Read the full case study

Questions about infrastructure

Will outreach ever be sent from our main company domain?
No. Outreach always sends from separate, dedicated domains that mirror your brand but carry no connection to your primary domain in a way that could put it at risk. Your main domain, used for customer communication and internal email, is never used for cold outreach.
What happens if a sending domain gets flagged or blacklisted?
Deliverability is monitored continuously. If a domain shows early signs of a reputation problem, sending volume is reduced or paused on that domain immediately and capacity shifts to other warmed domains, so overall outreach continues without interruption.
Is LinkedIn outreach safe for our account, or does it risk a restriction?
LinkedIn accounts are ramped gradually, with conservative daily connection and message limits that stay well within platform norms, rather than maximised for short-term volume. This is slower but dramatically reduces the risk of account restrictions.
How long does domain warm-up actually take?
Typically two to three weeks of gradual, low-volume, authentic sending before a domain is used for full campaign volume. This cannot be safely compressed, rushing warm-up is the most common cause of deliverability failure in DIY cold email.
What technical setup is involved, SPF, DKIM, DMARC?
Every sending domain is configured with SPF, DKIM, and DMARC records before warm-up begins. These are the technical authentication standards that tell inbox providers a domain is legitimate, and skipping them is one of the most common reasons DIY cold email fails.
What if our domain was already damaged before we started with Deligatr?
This is a common starting point. The standard response is to fully quarantine the damaged domain, stop all sending from it, and build fresh, isolated sending domains rather than trying to repair the damaged one, which is often slower and less reliable than starting clean.

Have a domain that needs recovering?

Book a free strategy call and we will walk through exactly how we would rebuild your infrastructure.