← All posts · Deliverability

Email Infrastructure 101: Domains, IPs, and Reputation

By · · 10 min read

Email infrastructure is the backbone of deliverability because bad infrastructure kills good copy before it reaches the inbox. At Outbound Pros we typically use a three-tier approach across 13+ active client campaigns: Primeforge handles DNS setup, Mailforge distributes volume across healthy IPs, and Infraforge gives dedicated IPs for isolation; most teams should start distributed and graduate to private infrastructure at 10K+ emails per month.

Why Does Email Infrastructure Matter More Than Copywriting?

Email infrastructure controls roughly half of your cold email outcomes because inbox placement happens before copy can do its job.

Around 30% of cold emails never reach the inbox at all. They bounce, get throttled, or land in spam before the subject line, hook, or CTA gets a fair shot. Copywriting is still critical, but weak infrastructure hard caps performance.

At Outbound Pros we have seen the same copy produce wildly different outcomes depending on setup. One recurring pattern is a team spending 6 to 12 weeks rewriting copy when the real issue is missing SPF coverage, broken DKIM, or a contaminated shared IP pool. In one case, a client topped out around 12% inbox placement with solid messaging. After fixing infrastructure, the same offer and same copy reached 87% inbox placement.

Infrastructure gets ignored because it is invisible until it breaks. The usual symptom is not a dramatic outage. It is a slow decay: reply rates fall 20% to 40% over a month, open rates get inconsistent, and nobody can explain it from the campaign dashboard alone.

At Outbound Pros we manage this layer across 200+ campaigns shipped, and the honest limitation is that infrastructure cannot rescue a bad list or weak offer. It only gives good campaigns a chance to be seen.

What's More Important: Domain Reputation or IP Reputation?

Domain reputation and IP reputation are separate trust signals because mailbox providers evaluate both the identity sending the message and the network path it came from.

Domain reputation is built from SPF, DKIM, and DMARC alignment, sending consistency, bounce rates, complaint rates, and historical behavior over time. IP reputation is built from sender behavior on the IP itself: engagement, complaints, spam hits, abuse patterns, and list quality.

You need both clean. A healthy domain on a bad IP still struggles. A healthy IP sending for a damaged domain also struggles. They are not substitutes.

This is where cheap shared infrastructure burns teams. We see accounts with proper DNS setup, disciplined warmup, and low bounce rates still landing in spam because the shared pool was oversold and another sender trashed the IP reputation. Nine times out of ten, when a team says "we did everything right," this is the inherited problem.

The fastest practical checks are simple.

- Run the domain through MXToolbox
- Check sending IPs in Cisco Talos reputation lookup
- Set up Google Postmaster Tools on every sending domain

If the domain and IP both look clean, the bottleneck is usually copy, offer, or list quality. If either is flagged, infrastructure is the bottleneck.

Should You Use Shared or Dedicated IPs for Cold Email?

Shared IPs are pooled sending addresses and dedicated IPs are exclusive sending addresses because one model trades control for convenience and the other trades convenience for isolation.

Shared IPs are the default on cheaper platforms. They are already warm, they cost little or nothing beyond the platform fee, and they let small teams start fast. That makes them fine for testing, low-volume campaigns, and sub-1K-email-per-month sending.

The downside is pooled risk. If dozens or hundreds of other senders share the same IPs, you inherit their behavior. One noisy spammy sender can pull down placement for everyone else.

Dedicated IPs give you control and isolation. Nobody else can damage your reputation on that address. Typical cost is $5 to $20 per IP per month, and the real cost is time: the IP starts cold and usually needs 30 to 90 days of warmup.

At Outbound Pros, the practical threshold is usually around 5K emails per month. Below that, shared or distributed infrastructure often makes sense. Above that, dedicated infrastructure usually wins on control, reputation safety, and cost per email over time.

We had one client sit on a popular shared pool for roughly a year with a 1.8% reply rate. The list was clean and the copy was not the issue. We moved them to dedicated infrastructure, ran a 60-day warmup, and reply rate moved into the 6% to 8% range. Nothing changed in the offer. Mail just started reaching the inbox.

The honest trade-off is that dedicated infrastructure is not magic for tiny volumes. If you are sending a few hundred emails a month, the added setup and warmup burden is usually not worth it yet.

How Do DNS Records Form Your Email Foundation?

SPF, DKIM, and DMARC are the authentication layer of email infrastructure because mailbox providers use them to verify that your messages are legitimate and authorized.

SPF tells receiving servers which senders are allowed to send on behalf of your domain. The common failure modes are too many DNS lookups, syntax mistakes, and forgetting to add a new sending provider after expanding your stack.

DKIM adds a cryptographic signature to outbound mail. Receivers check the matching public key in DNS to verify message integrity and sender authenticity. Each sending service usually requires its own selector and its own records. In practice, correctly configured DKIM can move inbox placement meaningfully, especially when a domain was previously sending unsigned or partially configured mail.

DMARC is the policy layer that tells receivers what to do when SPF or DKIM checks fail. The normal progression is to start with monitoring, review reports for 1 to 2 weeks, then tighten enforcement. Moving too aggressively to full reject can break legitimate traffic if the rest of the setup is not clean.

Without all three configured properly, warmup alone does not save you. In 2026, unauthenticated outbound is treated as suspicious by default.

At Outbound Pros we use Primeforge to standardize DNS and mailbox setup because manual DNS entry is where many beginner teams create silent failures. The operator detail here is that most breakage is not dramatic. It is one missing include, one stale DKIM selector, or one DMARC policy rolled out before verification was done.

How Long Does Domain Warmup Take and What Volume Is Safe?

Domain warmup is a controlled increase in sending volume because mailbox providers trust patterns that develop gradually and distrust sudden spikes from new domains.

A realistic timeline is 60 to 90 days to build stable reputation. New domains have no behavioral history, so the safest path is low volume, consistent activity, and close monitoring of bounce and complaint rates.

The volume curve we use for new domains is straightforward.

- Days 1-7: 50-100 emails per day
- Weeks 2-4: 100-200 per day
- Month 2: 200-500 per day if metrics stay clean
- Month 3+: 500-2,000 per day with measured increases
- Month 6+: 2,000+ per day on a mature domain

The failure pattern is always the same. Someone buys a fresh domain, does basic setup, and sends 5K to 10K emails within the first few days. Bounce rates spike because the list is not clean. Complaint rates spike because volume outran trust. Filters tighten, and the domain starts its life damaged.

Recovery is slow. If you blast 10K emails from a new domain on day one, you are usually looking at 60+ days of low-volume recovery work, and some domains never fully recover. At Outbound Pros, when a domain is badly burned, the faster option is often to park it and start over with a new one.

Warmforge helps automate this for client campaigns, but the rule matters more than the tool: warm slowly, monitor daily, and do not negotiate with the ramp.

What Provider Model Fits Your Sending Volume?

Email infrastructure providers fall into private, distributed, and provider-managed models because teams at different volumes need different levels of control and operational simplicity.

Private infrastructure means dedicated IPs and reputation isolation. At Outbound Pros we use Infraforge for clients sending serious volume and wanting long-term control. This is usually the right fit at 10K+ emails per month.

Distributed infrastructure means a managed pool of healthy IPs. We use Mailforge for many clients in the 1K to 10K per month range. The provider handles warmup, rotation, and reputation management. You get simplicity, but less control over exact routing and some exposure to pool-level dynamics.

Provider-managed sending means using Google Workspace or Microsoft 365 mailboxes directly. We use Primeforge to provision and manage this layer. This works well for lower volume, often under 1K per month, but eventually you hit limits and need either more mailboxes or a dedicated outbound layer.

The matching is usually simple.

| Model | Best volume range | Main advantage | Main trade-off |
| --- | --- | --- | --- |
| Provider-managed | Under 1K/month | Simple setup | Limited scale |
| Distributed | 1K-10K/month | Fast launch, low ops burden | Less control, shared dynamics |
| Private | 10K+/month | Full reputation isolation | More setup and warmup |

What matters most is choosing a model that matches your current volume, not the volume you hope to hit six months from now.

What Are the Most Common Email Infrastructure Mistakes?

Email infrastructure mistakes are small setup or behavior errors that create outsized deliverability damage because reputation compounds over time.

The most common ones are consistent across new accounts we audit.

- Sending from noreply addresses instead of real person mailboxes
- Blasting all volume through a single domain
- Ignoring bounce rates until reputation is already damaged
- Skipping list validation before launch
- Using ultra-cheap shared pools that are oversold
- Sending meaningful volume from brand-new domains
- Switching providers mid-campaign and resetting trust signals

A few thresholds matter. Bounce rates above 2% start hurting. Above 5% is active reputation damage territory. Old purchased or stale lists often carry 10% to 20% bad addresses, which means one bad launch can poison a healthy setup quickly.

At Outbound Pros we also see teams chase the idea of a magic provider. They switch from one platform to another three times in a quarter, hoping deliverability will fix itself. It does not. Consistent behavior on a sound setup beats constant provider hopping.

The honest limitation here is that infrastructure discipline feels slow and boring. That is exactly why it works. Most teams sabotage themselves by trying to compress a 90-day trust-building process into one aggressive week.

How Does Outbound Pros Structure Email Infrastructure for Clients?

Our infrastructure stack is a three-tier system because setup, sending, and monitoring each need different tooling and controls.

At Outbound Pros, Primeforge handles DNS and mailbox setup. Mailforge or Infraforge handles sending depending on the client's volume and need for isolation. Warmforge handles warmup and ongoing reputation monitoring.

The decision flow on a new client is operational, not theoretical.

1. Audit SPF, DKIM, and DMARC
2. Estimate monthly volume and required domain count
3. Choose distributed or private sending model
4. Implement warmup with strict volume caps
5. Monitor domain and IP reputation continuously

For most clients in the 1K to 10K per month range, distributed infrastructure is the cleanest start. For clients at 10K+ who are committed to scaling, private infrastructure usually makes more sense. Everyone gets proper mailbox provisioning and DNS hygiene regardless of model.

We are opinionated about architecture, not dogmatic about vendor names. Similar setups can work with Instantly, Smartlead, or other tools if the fundamentals are right. The real leverage is not the brand. It is clean DNS, realistic warmup, reputation isolation, and steady monitoring.

Frequently Asked Questions

What's the minimum viable email infrastructure?

Minimum viable email infrastructure is one authenticated sending domain and one real mailbox because even low-volume outbound needs SPF, DKIM, and DMARC to be taken seriously.

For under 500 emails per day, one domain plus Google Workspace or Microsoft 365 is enough if setup is clean. Around 500 to 2K per day, add a second mailbox or move to distributed infrastructure like Mailforge. At 2K+ per day, start planning for multiple domains or private infrastructure.

How long does it take to build good domain reputation?

Good domain reputation usually takes 60 to 90 days because mailbox providers need enough clean sending history to trust the pattern.

Weeks 1 and 2 are mostly neutral. Weeks 3 and 4 create an initial impression. Month 2 is where reputation starts to stabilize. By month 3, a clean domain with disciplined warmup can reach strong inbox placement. A damaged domain often needs 30 to 60 days just to recover.

Should I use one domain or multiple for cold outreach?

The right number of domains depends on volume because reputation risk should be spread in proportion to how much you send.

One domain is usually fine below 1K emails per day. At 1K to 5K per day, 2 to 3 domains is safer. At 5K+ per day, 4 to 6 domains is a practical range. Too few concentrates risk. Too many creates needless warmup and management overhead.

What's the relationship between Google or Microsoft and outbound infrastructure?

Google Workspace and Microsoft 365 host mailboxes, while outbound infrastructure tools manage reputation, routing, warmup, and scaling because mailbox hosting and outbound optimization solve different problems.

Many teams use both. At Outbound Pros, clients often keep Google or Microsoft for everyday communication and layer outbound infrastructure on top for campaigns so sales sending does not interfere with the main company domain reputation.

Can I recover from a damaged domain reputation?

Yes, but recovery is slow because mailbox providers need to see a new pattern of disciplined behavior over time.

If bounce rates went over 5%, complaint rates spiked, or the domain was blocklisted, stop volume immediately. Clean the list, fix DNS, reduce sending to very low daily counts, and expect 30 to 60 days of recovery work. In severe cases, launching a fresh domain is faster than trying to save the old one.