One Rep’s Cold Email Can Burn the Whole Company’s Domain

Here is a scenario that plays out constantly. A company hires its first SDR, sets them up with alex@company.com, and points them at a list of a few hundred prospects. Nothing aggressive. Twenty or thirty emails a day, all written by hand. Six weeks later the founder notices a signed proposal never got its follow-up reply, then that a customer "never received" an invoice, then that the monthly newsletter's open rate cratered. Nobody connects it to the SDR, because why would they. The outreach was polite and low volume.

That polite, low-volume outreach is what did it.

Your primary domain is the single piece of infrastructure the whole business runs on top of. Every deal, every invoice, every password reset, every support reply, every 1:1 email the founder sends moves through it. Cold outreach puts all of that at risk, and most teams have no idea until the damage is already done.

Reputation belongs to the domain, and everyone shares it

Mailbox providers do not score individual people. They score the domain. SPF, DKIM, and DMARC all authenticate at the domain level: that is the entire point of them, telling Gmail "this mail really came from company.com." So when Gmail decides company.com sends mail people don't want, that judgment lands on company.com. Not on Alex.

The result is blunt. One inbox sending cold email can drag down deliverability for all forty people on the domain. The founder's careful note to an investor, the automated receipt from your billing system, the reply your support team sends to an already-annoyed customer: all of it starts skipping the inbox and sliding into spam, at the same time.

How cold email actually burns a domain

The fastest route is spam complaints. Google's own sender guidance says to keep your complaint rate under 0.3 percent and to treat anything close to that as a real problem. That is three complaints per thousand emails. Cold outreach, by definition landing in front of people who never asked to hear from you, clears that bar without breaking a sweat. A few irritated recipients tapping "report spam" is the whole story.

Bounces do their part. Cold lists go stale, and hard bounces to dead addresses signal that you are mailing a list you did not build through real signups. Scraped and purchased lists carry a worse problem: spam traps, addresses planted specifically to catch senders who scrape and spray. Hit one recycled trap and you get flagged as precisely the kind of sender the filters exist to stop.

Then there is engagement. Modern filters watch what people do with your mail: open it, reply, delete it unread, drag it to spam. Cold email mostly gets ignored, and being ignored is its own negative signal. The filter learns that mail from your domain is mail people skip, and it adjusts where that mail goes.

"We only send personalized 1:1 emails" does not save you

This is the objection I hear most, and it misreads how filtering works. Gmail cannot see that your email was hand-written and thoughtful. It sees an unsolicited message to someone who never opted in, and that someone can still mark it as spam. Personalization changes how a human feels about the email. It does nothing to the signals the machine reads.

Low volume does not save you either, and for small companies it usually makes the exposure worse. A domain that has only ever sent a few thousand emails has almost no reputation history to cushion a bad week. On a sending record that thin, three complaints reads as a percentage big enough to trip alarms. A five-person startup with one rep doing "minimal outreach" is the most exposed case there is, because the domain is young, lightly used, and has nothing built up to absorb the hit.

The damage is quiet, and slow to undo

Nobody sends you a warning. There is no alert that says your reputation dropped this morning. Your mail simply starts landing in spam, quietly, and it happens to warm prospects and paying customers at the same moment it happens to cold ones. You usually find out weeks later, secondhand, when someone mentions they never got the thing you know you sent.

Recovery is slow. Rebuilding domain reputation means weeks, sometimes months, of clean and genuinely wanted sending before providers trust you again, and some domains never climb all the way back. Land on a public blocklist like Spamhaus and even your transactional mail (receipts, resets, alerts) can stop getting delivered until you are removed. All of that to avoid paying for a second domain.

Send cold outreach from somewhere else, every time

The rule is simple. Your primary domain is for people who already know you. Cold outreach goes somewhere else, always.

In practice that means buying one or more separate sending domains, usually lookalikes of your real one (getcompany.com, trycompany.com, company-hq.com) that redirect to your actual site so a curious prospect still lands in the right place. Warm each one before you rely on it, starting at ten or twenty sends a day and ramping over two to four weeks so the growth looks organic. Spread sending across a few mailboxes and keep each inbox's daily volume low. Authenticate those domains with SPF, DKIM, and DMARC exactly like your main one. Run every list through a bounce verifier before the first send.

Do that and a bad campaign burns a throwaway domain you can replace for fifteen dollars. Your real domain, the one every customer relationship and signed deal depends on, never feels it. Setting this up properly is a RevOps problem more than a sales one, because it is infrastructure, and infrastructure is worth getting right before the first email goes out.

FAQ

Can I use a subdomain like mail.company.com instead of a whole new domain?

A subdomain gives you partial separation and is a fine home for things like your newsletter or product notifications. For cold outreach it stays too close: providers fold the root domain's reputation into how they treat its subdomains, so a bad enough burn can bleed back onto company.com. For anything cold, use a fully separate domain.

How long does warming up a new domain take?

Plan on two to four weeks. Start around ten to twenty emails a day, aim the early sends at people likely to open and reply, and raise the volume gradually. Rushing the ramp is its own way of tripping the filters.

My domain reputation is already damaged. What do I do?

Stop all cold sending from it today. For the next several weeks send only mail people actually want and engage with, so the domain rebuilds a positive track record. Move cold outreach onto dedicated domains going forward, and if you are on a blocklist, work through that list's removal process once you have genuinely fixed the sending behavior that got you listed.

If your team is doing outbound, or about to start, and it is all running through your main domain, that is worth fixing before it costs you a customer relationship. We build outbound email infrastructure that keeps your primary domain protected and your cold campaigns landing. Book a consultation and we will map it out with you.