Sending cold outreach from your primary corporate domain risks catastrophic domain reputation damage and blacklisting by Google and Microsoft spam filters. A dedicated multi-domain infrastructure is mandatory.
1. DNS Authentication & Mailbox Provisioning Specs
| DNS Record Type | Authentication Purpose | Compliance Requirement |
|---|---|---|
| SPF (TXT) | Specifies authorized sending IPs | v=spf1 include:_spf.google.com ~all |
| DKIM (CNAME / TXT) | 2048-bit cryptographic header signature | Mandatory for domain alignment |
| DMARC (TXT) | Specifies policy for failed SPF/DKIM | v=DMARC1; p=quarantine; pct=100; rua=mailto:... |
| Custom Tracking Domain | CNAME rewrite for pixel/link tracking | Prevents generic ESP tracking domain reputation bleed |