Cold Email Infrastructure Glossary

SPF is a DNS-based email authentication protocol that specifies which mail servers and IP addresses are authorised to send email on behalf of a domain. It is published as a DNS TXT record at the root of the sending domain and is checked by receiving mail servers before accepting an inbound message.

An SPF record lists authorised sending sources using include statements (e.g. include:_spf.google.com for Google Workspace) and ends with a qualifier: ~all (softfail — deliver but flag) or -all (hardfail — reject). A missing or incorrect SPF record is one of the most common causes of cold email landing in spam.

SPF alone does not protect against email spoofing in the From header — that requires DKIM and DMARC in combination. Gmail and Yahoo made SPF mandatory for all bulk senders in February 2024.

DKIM is an email authentication method that uses a pair of cryptographic keys — a private key held by the sending mail server and a public key published as a DNS TXT record — to attach a digital signature to every outgoing email. The signature is embedded in the email header and verified by the receiving server using the public key.

DKIM proves two things: (1) the email was sent by a server authorised by the domain in the signature, and (2) the email content was not altered in transit. It is one of the three core authentication protocols required by Gmail and Outlook for bulk senders.

For cold email, DKIM should use 2048-bit key length (1024-bit is deprecated). Each sending platform should have its own DKIM selector to isolate reputation. Icemail generates and publishes DKIM keys automatically for every mailbox.

DMARC is a DNS-based email policy protocol that builds on SPF and DKIM to give domain owners control over how receiving mail servers handle emails that fail authentication checks. A DMARC record is published as a DNS TXT record and specifies a policy (p=none, p=quarantine, or p=reject) and a reporting address to receive aggregate data about authentication failures.

DMARC requires that either SPF or DKIM alignment passes — meaning the domain in the From header must match the domain used in either the SPF envelope sender or the DKIM signature. This prevents spoofing even when SPF and DKIM are individually configured.

For cold email senders, the recommended progression is: start at p=none (monitor without enforcing), then graduate to p=quarantine, then p=reject once all legitimate sending sources are confirmed. Jumping directly to p=reject before a full sender audit blocks legitimate email from CRMs, helpdesks, and other platforms.

An MX (Mail Exchange) record is a DNS entry that specifies which mail servers are responsible for receiving incoming email for a domain. Without correctly configured MX records, a domain can send email but cannot receive replies — a critical oversight for cold email campaigns.

For Google Workspace domains, MX records point to Google's mail servers (aspmx.l.google.com with priority 1, plus four backup MX records). For Microsoft 365, they point to the Exchange Online server (yourdomain-com.mail.protection.outlook.com with priority 0).

MX records are distinct from SPF, DKIM, and DMARC records (all of which are TXT records) and serve a different function — routing inbound mail rather than authenticating outbound mail. Icemail configures MX records automatically alongside all authentication records.

A DNS TXT (text) record is a type of DNS entry that allows domain administrators to associate arbitrary text data with a domain. In the context of email, TXT records are used to publish SPF, DKIM, and DMARC authentication policies — all three are stored as TXT records in a domain's DNS zone.

TXT records are queried by receiving mail servers when they process an inbound email, allowing them to verify the sender's identity and apply the domain's stated email policy. Incorrect, duplicate, or missing TXT records are among the most common causes of email authentication failures.

For cold email, the most important TXT record constraints are: (1) a domain may only have one SPF TXT record — multiple SPF records cause validation failures; (2) SPF TXT records must not exceed 10 DNS lookups; (3) DKIM TXT records must use the correct selector subdomain format (selector._domainkey.domain.com).

DMARC alignment is the requirement that the domain in the visible From header of an email matches the domain used in either the SPF return-path or the DKIM d= signature. Alignment is what gives DMARC its anti-spoofing power — without it, an attacker could pass SPF and DKIM on their own domain while using a different domain in the From header visible to the recipient.

There are two types of alignment: relaxed (the default) allows subdomain matching — a From header of mail.company.com aligns with an SPF/DKIM domain of company.com. Strict alignment requires an exact match.

For cold email senders using multiple sending domains, each domain must have its own SPF, DKIM, and DMARC configuration with proper alignment. Misalignment is a frequent cause of DMARC failures even when SPF and DKIM individually pass.

Cold email infrastructure is the complete technical stack that enables outbound cold email campaigns: the domains used for sending, the mailboxes provisioned on those domains, the DNS authentication records (SPF, DKIM, DMARC), the IP addresses associated with mailboxes, the warmup process that builds sender reputation, and the integrations that connect mailboxes to sending platforms.

Infrastructure quality is the primary determinant of whether cold emails reach the primary inbox. A 2024 benchmark shows global average inbox placement at 83.5% — meaning 1 in 6 legitimate emails never reaches the inbox. Well-configured infrastructure consistently achieves 95–99%+ inbox placement.

Icemail is a cold email infrastructure platform that automates all components of this stack — provisioning Google Workspace and Microsoft 365 mailboxes with automated DNS, US-based IPs, and pre-warmed accounts at $2.50/mailbox/month.

A dedicated IP address is an internet protocol address assigned exclusively to a single sender or organisation, as opposed to a shared IP pool used by multiple senders simultaneously. In email infrastructure, IP reputation is a core deliverability signal — receiving mail servers use it alongside domain reputation to make inbox placement decisions.

With a shared IP, a sender's deliverability is directly affected by the sending behaviour of every other user on the same IP. A single bad actor on the pool can trigger blacklisting that affects all users. A dedicated IP isolates reputation entirely — only the owner's sending behaviour determines the IP's score.

For cold email, US-based dedicated IPs are preferred for outreach to US B2B audiences because geographic proximity reduces spam scoring flags. Icemail provisions all mailboxes on US-based IPs with clean sending histories.

A sending domain is a domain registered and used exclusively for outbound cold email campaigns, kept strictly separate from the organisation's primary business domain. Using a dedicated sending domain protects the primary domain's reputation from the higher spam complaint rates inherent to cold outreach.

Sending domains are typically closely related to the primary brand to maintain credibility (e.g. if the primary domain is acme.com, sending domains might be getacme.com, tryacme.com, or acme.io). Each sending domain requires full DNS configuration (SPF, DKIM, DMARC, MX) and a warmup period of 3-4 weeks before it can safely handle cold email volume.

For scale campaigns, domain rotation across multiple sending domains is standard practice — distributing volume to stay within safe per-domain limits and limiting blast radius if one domain is flagged.

Email warmup is the process of gradually increasing sending volume from a newly provisioned mailbox or domain over 3-4 weeks to establish a positive sender reputation with ISPs before running full cold email campaigns. ISPs treat sudden high-volume sending from new mailboxes as a spam signal — warmup mimics natural human email behaviour to avoid triggering filters.

A standard warmup schedule begins at 10-15 emails per day in week one (primarily to warm, engaged contacts), scales to 20-25 in week two, 25-30 in week three, reaching the 30-emails-per-day maximum by week four. During warmup, reply rate (target: 10%+) and bounce rate (keep under 2%) are the key monitoring metrics.

Pre-warmed mailboxes — accounts that have already completed the warmup process — are available through Icemail at $5/month, allowing campaigns to launch at full capacity without the 4-week waiting period.

Domain rotation is the practice of distributing cold email sending volume across multiple sending domains and their associated mailboxes to stay within safe sending limits per domain and reduce the impact if any single domain is flagged or blacklisted.

The standard rotation structure is 3-5 mailboxes per domain, with a maximum of 30 emails per mailbox per day. Campaigns are spread across 3 or more domains simultaneously, so a single domain flag does not stop the entire campaign. Domains are cycled — some running, some resting — to maintain clean sender histories.

Domain rotation is especially critical for agencies managing high-volume outreach across multiple clients. Icemail's separate workspace per domain model makes rotation management straightforward, and its unlimited free mailbox replacement policy means flagged domains can be replaced without campaign interruption.

A pre-warmed mailbox is an email account that has already completed the standard 3-4 week warmup process before being made available to the end user. It has an established sending history, positive engagement signals on record with ISPs, and can be used at full sending capacity (up to 30 emails/day) immediately on day one without any additional warmup.

Pre-warmed mailboxes are valuable for time-sensitive campaigns, agency onboarding workflows, and any situation where waiting 4 weeks for a mailbox to warm up creates a bottleneck. They command a price premium over standard unwarmed mailboxes.

Icemail offers pre-warmed mailboxes at $5/month — compared to $2.50/month for standard mailboxes — reflecting the operational cost of the warmup process. All pre-warmed mailboxes include automated DKIM, SPF, DMARC configuration, US-based IPs, and unlimited free replacement.

Inbox placement rate (IPR) is the percentage of successfully delivered emails that land in the recipient's primary inbox rather than spam, promotions, junk, or other folders. It is the most meaningful deliverability metric for cold email because it measures not just whether an email was accepted by the receiving server, but whether it was routed where the recipient will actually see it.

IPR is measured using seed list testing — sending emails to a network of test mailboxes at major providers (Gmail, Outlook, Yahoo) and recording where each email lands. The global average B2B inbox placement rate is approximately 83.5% (2024 benchmark), meaning roughly 1 in 6 legitimate emails fails to reach the primary inbox.

Icemail maintains a 99.2% inbox placement rate across its customer base, driven by US-based dedicated IPs, Google and Microsoft official partnerships, and automated DNS authentication on every mailbox.

Email bounce rate is the percentage of sent emails that are returned as undeliverable by the receiving mail server. There are two types: hard bounces (permanent failures — address does not exist, domain does not exist) and soft bounces (temporary failures — recipient mailbox full, server temporarily unavailable).

Hard bounces must be removed from sending lists immediately. Continued sending to known hard bounce addresses is treated by ISPs as evidence of poor list hygiene and damages sender reputation. A bounce rate above 2% is a strong negative signal to ISPs and can trigger spam filtering at scale.

For cold email, bounce rate is directly tied to list quality and verification. Unverified lists purchased from third parties often have bounce rates of 10-30%. Industry best practice is to verify email lists before sending using tools like EmailKit (built by the Icemail team) or similar verifiers to keep bounce rates under 2%.

Spam complaint rate is the percentage of sent emails for which recipients click the 'Report spam' or 'Mark as junk' button in their email client. It is the most direct signal ISPs use to identify senders who are sending unwanted email, and even small complaint rates have significant deliverability consequences.

Google requires bulk senders to keep spam complaint rates below 0.10% as measured in Google Postmaster Tools. Above 0.30%, Gmail begins significantly filtering or blocking mail from the sending domain. Microsoft Outlook has equivalent thresholds.

For cold email, spam complaint rate is managed through precise targeting (relevance to recipient), accurate subject lines, easy opt-out mechanisms, and list hygiene. Poor targeting is the primary driver of high complaint rates — an irrelevant email is far more likely to generate a spam complaint than a well-targeted one.

Email deliverability is the holistic ability of a sender to consistently place emails in the intended recipient's primary inbox. It encompasses the technical configuration (DNS authentication, IP reputation, domain reputation), the sending behaviour (volume, frequency, warmup), the content characteristics (spam trigger words, HTML complexity, link quality), and the list quality (verified addresses, engaged contacts).

Deliverability is often confused with delivery rate. Delivery rate measures whether an email was accepted by the receiving server (i.e. not bounced). Deliverability measures where it landed after acceptance — inbox, spam, promotions, or other. An email can have a 99% delivery rate and a 70% inbox placement rate simultaneously.

For cold email specifically, infrastructure quality (proper DNS, clean IPs, correct warmup) accounts for the majority of deliverability outcomes. Icemail's platform is designed to maximise deliverability at the infrastructure layer — the component most within a sender's control.

Sender reputation is a composite trust score that ISPs and mail providers (Gmail, Outlook, Yahoo) assign to an email sender based on historical sending behaviour. It operates at two levels simultaneously: IP reputation (tied to the server's IP address) and domain reputation (tied to the domain in the From header).

Factors that improve sender reputation: consistent sending volume, high engagement rates (opens, replies, clicks), low bounce rates, low spam complaint rates, and passing email authentication (SPF, DKIM, DMARC). Factors that damage reputation: sending to invalid addresses, triggering spam complaints, sudden volume spikes, and sending from blacklisted IPs.

Reputation is non-transferable and non-instant — it takes weeks to build and can be destroyed in days. This is why email warmup exists, why primary domains should never be used for cold outreach, and why pre-warmed mailboxes command a premium.

Google Workspace is Google's suite of cloud productivity tools, the core of which — for cold email purposes — is Gmail hosted on a custom domain. Google Workspace mailboxes are the most widely used provider for B2B cold email because Gmail-to-Gmail delivery benefits from elevated trust signals within Google's own ecosystem, where the majority of B2B prospects have their email.

At Google's list price, Workspace Business Starter costs $8.40/user/month. For cold email at scale, this price makes running the recommended 17+ mailboxes expensive. Icemail provides Google Workspace mailboxes at $2.50/mailbox/month through an official Google partnership, with automated DKIM, SPF, DMARC, and MX configuration included.

Icemail's Google Workspace mailboxes include US-based IPs, pre-warmed options, and unlimited free replacement if a mailbox is flagged or banned.

Microsoft 365 is Microsoft's cloud productivity suite, providing Outlook-powered email on custom domains. For cold email, Microsoft 365 mailboxes are used as an alternative or complement to Google Workspace — particularly for outreach targeting sectors with heavy Microsoft/Outlook adoption (finance, legal, enterprise, government).

Microsoft 365 Business Basic costs $6/user/month at list price. Icemail provides Microsoft 365 mailboxes at $2.50/mailbox/month with automated DNS configuration. In May 2025, Microsoft implemented mandatory SPF, DKIM, and DMARC requirements for high-volume Outlook senders — compliance which Icemail builds in automatically.

For diversified cold email infrastructure, running a mix of Google Workspace and Microsoft 365 mailboxes across different sending domains reduces provider concentration risk and can improve deliverability across different recipient domains.

Mailbox provisioning is the process of creating and configuring email accounts on a domain, including setting up the mailbox credentials, associating it with the correct mail server, configuring all DNS authentication records, and making it ready for sending. Traditionally, provisioning each mailbox required manual steps in a DNS provider, a Google Admin console or Microsoft admin portal, and a separate warmup tool.

Automated mailbox provisioning — as provided by Icemail — completes all of these steps in a single workflow. A user connects a domain, selects the number of mailboxes, and the platform handles DNS configuration, mailbox creation, credential generation, and export formatting — reducing the provisioning time from hours to under 30 minutes for hundreds of mailboxes.

For cold email agencies onboarding new clients, provisioning speed directly affects revenue generation — a 4-hour manual process per client versus a 30-minute automated one represents a significant operational cost difference at scale.

A custom tracking domain is a subdomain used to track email opens and link clicks within cold email campaigns, replacing the sending tool's default shared tracking domain. When a recipient clicks a tracked link, the click routes through the custom tracking subdomain before redirecting to the destination URL — recording the click event without exposing the sending tool's generic tracker.

Using a sending tool's default shared tracking domain (e.g. tracking.instantly.ai) ties tracking reputation to every other user of that tool. A custom tracking subdomain (e.g. track.yoursenddomain.com) isolates tracking reputation to the sender.

For cold email, the options in order of deliverability impact are: (1) disable tracking entirely — eliminates tracking pixels which increasingly trigger spam filters; (2) use a custom tracking domain matching the sending domain; (3) use the tool's shared default — least recommended.

The CAN-SPAM Act (Controlling the Assault of Non-Solicited Pornography And Marketing Act) is the primary US federal law governing commercial email. It was enacted in 2003 and is enforced by the Federal Trade Commission (FTC).

CAN-SPAM does not prohibit unsolicited commercial email (cold email is legal under US law) but sets requirements for commercial messages: accurate From and subject lines, a valid physical mailing address, a clear opt-out mechanism, and honouring opt-out requests within 10 business days. Violations carry penalties of up to $53,088 per email.

For cold B2B email, CAN-SPAM compliance is relatively straightforward: include a physical address in the email footer, include a one-click unsubscribe option, and honour removals promptly. The more restrictive frameworks for US senders are ISP-level policies (Gmail's 0.10% spam rate requirement) rather than CAN-SPAM itself.

GDPR is the European Union's comprehensive data protection law, effective since May 2018, that governs how organisations collect, process, and use personal data of EU residents. For cold email, GDPR's most relevant provisions concern the legal basis for processing personal data (including email addresses) and the conditions under which unsolicited email is permissible.

For B2B cold email to professional email addresses in the EU: sending is generally permissible under the legitimate interests basis (Article 6(1)(f)) when the email is directly relevant to the recipient's professional role and includes a clear opt-out option. For consumer email addresses, explicit prior consent is required.

GDPR applies to any organisation that sends email to EU residents, regardless of where the sender is based. Non-compliance can result in fines up to €20 million or 4% of global annual turnover, whichever is higher. Note: Icemail provides infrastructure only — compliance obligations rest with the sender.

An email blacklist (also called a DNSBL — DNS-Based Blackhole List) is a publicly accessible database of IP addresses and domains identified as sources of spam or malicious email. Receiving mail servers query these databases in real time when processing inbound emails and use blacklist status as a major factor in spam scoring.

The most impactful blacklists are Spamhaus (used by the majority of global email infrastructure), SURBL (URL-based, triggered by spammy links in content), and Barracuda Networks. Listing on Spamhaus can result in near-total delivery failure until the listing is resolved.

Blacklisting is caused by high spam complaint rates, spam trap hits (sending to addresses set up specifically to catch spammers), sudden volume spikes, or sending from IPs with pre-existing poor histories. Recovery requires identifying the root cause, addressing it, and submitting a delisting request. Icemail's unlimited free mailbox replacement policy means a blacklisted mailbox is replaced immediately at no cost — campaigns continue running while the issue is investigated.

Icemail is a cold email infrastructure platform that automates the provisioning of Google Workspace and Microsoft 365 mailboxes with full DNS authentication (DKIM, SPF, DMARC) on US-based IP addresses. It was built by the co-founder of Zapmail and is designed for cold email agencies, B2B sales teams, and outbound-focused founders who need reliable, scalable sending infrastructure.

Icemail's core value proposition is professional-grade infrastructure at a price point accessible to all scales of outreach: $2.50/mailbox/month for both Google Workspace and Microsoft 365, compared to $8.40/user for Google Workspace at list price. Setup takes under 30 minutes for any number of mailboxes.

Platform features include: automated DKIM/SPF/DMARC setup, US-based IPs, pre-warmed mailbox options ($5/month), bulk mailbox provisioning, separate workspace per client, unified master inbox, 1-click CSV export to Instantly/Smartlead/ReachInbox, unlimited free mailbox replacements, Cloudflare-managed domains, and a REST API for programmatic access.

A unified master inbox (also called a centralised inbox or master inbox) is a single interface that aggregates replies and conversations from multiple email accounts — across different mailboxes, sending domains, and client workspaces — into one view. For cold email agencies and teams running campaigns across dozens or hundreds of mailboxes simultaneously, managing replies in individual accounts is operationally impossible.

A unified inbox enables teams to: monitor reply volume in real time across all campaigns, respond to positive replies quickly (critical for conversion), identify and handle opt-outs and unsubscribes immediately, and escalate hot leads to the relevant sales rep or client.

Icemail's unified master inbox consolidates all client and campaign replies across all provisioned mailboxes into a single dashboard, with full reply capability from the centralised view without switching between individual accounts.

White-label email infrastructure is a reseller arrangement in which an agency, SaaS platform, or technology company offers branded mailbox provisioning, DNS configuration, and sending infrastructure to their clients — powered by an underlying infrastructure provider (such as Icemail) but presented under the reseller's own brand and interface.

White-labelling allows agencies to offer infrastructure as a managed service without building the underlying technology, SaaS email tools to embed mailbox provisioning into their product, and technology resellers to add a recurring revenue stream with minimal development investment.

Icemail's white-label programme provides agencies and platforms with access to Icemail's Google and Microsoft infrastructure, automated DNS, US-based IPs, and 99.2% inbox delivery — all branded under the reseller's identity. Custom pricing and terms are negotiated directly.

Cold email is an outbound sales and marketing technique in which unsolicited emails are sent to prospective customers who have had no prior contact with the sender. Unlike spam, cold email is targeted (sent to specific individuals based on relevant criteria), personalised (tailored to the recipient's industry, role, or situation), and business-to-business in its primary application.

Cold email remains one of the highest-ROI outbound channels for B2B companies when executed with proper infrastructure, targeting, and copy. A well-run cold email programme with good infrastructure can achieve reply rates of 3-8%, compared to industry averages of 1-2% for campaigns with poor infrastructure or targeting.

The key components of effective cold email are: (1) clean infrastructure (deliverability before copy), (2) verified, targeted prospect lists, (3) personalised, relevant messaging, and (4) a systematic follow-up sequence. Icemail handles component one — the infrastructure layer that determines whether the email reaches the inbox at all.

List hygiene refers to the ongoing process of verifying, cleaning, and maintaining email prospect lists to ensure they contain only valid, deliverable email addresses for appropriate, willing-to-receive recipients. Poor list hygiene is a primary cause of high bounce rates, spam complaints, and sender reputation damage.

List hygiene practices include: email address verification before sending (using tools like EmailKit, ZeroBounce, or NeverBounce to validate deliverability), removing hard bounces immediately after they occur, maintaining and honouring suppression lists (opt-outs and unsubscribes), deduplication, and regular list refreshes to remove contacts whose email addresses have changed.

For cold email, list hygiene is a deliverability issue as much as a compliance issue. A bounce rate above 2% signals to ISPs that a sender is not maintaining their list, which damages sender reputation regardless of how good the email content is.

EmailKit is an email verification and list cleaning tool built by the Icemail team, providing 98%+ accurate email verification at what the product positions as the lowest cost available. Email verification is the process of checking whether an email address is valid, deliverable, and not associated with known spam traps, disposable address services, or inactive mailboxes before sending.

Accurate pre-send verification is essential for maintaining bounce rates below the 2% threshold that protects sender reputation. Sending to unverified lists is one of the most common causes of deliverability problems — and one of the most avoidable.

EmailKit is available at emailkit.dev and operates as a complementary product to Icemail's infrastructure offering — Icemail provides the sending infrastructure, EmailKit ensures the lists those mailboxes send to are clean. Together, they address the two primary controllable levers of cold email deliverability.