There is a spreadsheet on my disk with 6,523 rows in it. Every row is a real email that my Python lead machine found, proved against DNS, and saved next to the exact page it was printed on. And the last column, the one I named Sent?, is completely blank. I built the whole machine and then froze at the send step, because by then I had understood something that changed how I think about outreach. Finding addresses is an engineering problem you can solve in an afternoon. Sending them is a reputation problem, and a careless sender can burn a fresh domain in a single week.

That fear was earned. Before the machine, I once checked a list of 1,031 verified emails from a paid vendor, and only 386 of them turned out safe to touch. One big courier company sat on a domain publishing NULL MX, which is a domain publicly announcing that it refuses all mail, so the vendor had sold an address that could never work even once. If sellers get the receiving side that wrong, plenty of freelancers get the sending side wrong too. So this is the mental model that keeps a domain alive, and the first things you can do about it today.

01/THE ONE IDEA

Sending is a reputation problem

An inbox provider like Gmail or Outlook cannot read your intentions. It has never met you, it does not know that you are honest, and it will not take your word for anything. So it reads two other things instead: proof that you are who you claim to be, and your behavior over time. That is the whole game. It is not a delivery problem. It is a reputation problem, and the reputation lives at the domain level.

Which is why the first move costs about twelve dollars and protects everything after it. Never send cold email from your main domain, the one your portfolio and your real clients already know, and not from a plain Gmail either, because free accounts were never built for outreach and the filters know exactly what a batch of similar mails from one looks like. Buy a separate sending domain instead, a small variation of your brand. My site is designesh.com, so my sending domain looks like getdesignesh.com. Close enough that a curious reader lands somewhere honest, separate enough that its reputation is entirely its own. If it ever gets burned after a careless stretch, you retire it, buy another variation, and your real name stays clean.

Add one real mailbox on that domain through Google Workspace or a similar host, around six dollars a month, and the foundation is done. That part you can finish today, in twenty minutes, before you read another word.

02/THREE LOCKS

Proof, not intentions

The proof half of the game is three small records with names that scare people into hiring someone for a ten minute job. Let me take the fear out of them. SPF is a public list of the servers allowed to send email for your domain. DKIM is a tamper proof signature added to every message, so the receiving side can prove that nobody changed it on the way. DMARC is your instruction sheet for what an inbox should do when the first two checks fail, and it quietly mails you reports so you catch problems early.

ONE COLD EMAILSPFa public list of allowed sendersDKIMa tamper proof signature on every emailDMARCinstructions for what happens on failureTHREE SMALL DNS RECORDS, ADDED AT YOUR REGISTRAR
fig 01. three locks, one envelope. what SPF, DKIM and DMARC each actually do

The reason all three matter comes straight back to the one idea. A domain with none of them is an anonymous stranger, and strangers get default suspicion. A domain with all three is a sender who signed their name, showed an ID, and left instructions. Same email, completely different treatment. Your mailbox provider hands you the exact values, you paste them in once at your registrar, and a free checker like MXToolbox confirms all three are live. That same free tool is the check I run on any domain before I trust it, and it is the one that caught that courier's NULL MX.

All of this assumes your list is already real, proved address by address the way I covered in how to build a verified lead list for free, because a bought list bounces and bounces are the loudest alarm a filter hears.

03/THE QUIET WEEKS

Slow is the whole trick

A brand new domain has no history, and providers judge domains almost entirely by how they behave. So for the first two weeks, minimum, the mailbox carries only normal human traffic. Notes to your own accounts and replies back. A real message to a friend. A newsletter signup or two. Or the warmup feature inside a sending tool, which trades small friendly emails with other warming inboxes for you. What you do not send in those two weeks is cold email. Not one.

HUMAN TRAFFIC ONLY, ZERO COLD EMAILDAY 1DAY 14GATE, DAY 15SMALL SENDS BEGINIF THE DOMAIN SITS IDLE, THE 14 DAY CLOCK RESETS
fig 02. the warmup strip. two quiet weeks of human traffic, a gate, then the first small sends

A fresh domain that fires fifty cold emails on day one looks exactly like a spammer, because that is what spammers do. They buy cheap domains, blast, get burned, and buy again, and the filters were built to catch that shape within days. Two quiet weeks of human behavior is you telling them, slowly and believably, that a person lives here. After the gate you start small, somewhere around fifteen to twenty five emails a day, and you climb only while the numbers stay clean.

Slow is the whole trick.

How small to start, how the daily number ramps week by week without tripping a filter, which days and hours actually land, and the exact records to paste for your own registrar: that is the fiddly, do it right part, the one most guides wave at and never spell out. I put all of it in one place so you follow it instead of guess.

04/AFTER DELIVERY

The words still have to be yours

Landing in the inbox only buys you a chance. The email still has to earn a reply, and most cold emails fail before any filter even matters, because they are written about the sender instead of the reader. The shape that respects the reader is simple, and it fits in under 150 words. One real observation from their actual page, the kind of thing you could only know by looking. The pain hiding behind it. One concrete thing you would build for them, a single specific idea. One true proof line. And one soft question a busy person can answer in five seconds.

My proof line is short and real: I am a Top Rated freelancer on Upwork with a 100 percent Job Success score, mostly Excel and automation work. Yours has to be equally true, whatever its size, because a small true number reads as honest and a big vague claim reads as spam. I let AI draft these from the saved page text, with hard rules and with me approving every single one before it goes, a flow I wrote about in how I use AI to find and qualify clients. Behind that draft sit a strict prompt and a short copy checklist that no email of mine skips, and those two are the difference between mail that sounds like a person and mail that sounds like every other bot in the folder.

> Where this leaves you

So the order is simple. Today, buy the variation domain and add one mailbox. This week, set the three records and confirm them with a free checker. For the two weeks after that, human traffic only while you qualify your leads, and remember idle does not count. Then a first small handful of honest emails, each one written from a real page, and you grow the number only while the domain stays clean.

I am not ahead of you here. My own Sent? column is still blank as I write this, 6,523 proven rows waiting on the exact discipline I just described, and the blank column has taught me that freezing feels safer than sending and pays nothing at all. The machine did its job. The domain costs twelve dollars. The patience costs two weeks.

If you want the exact records to paste, the day by day warmup calendar and the full send playbook in one place instead of piecing them together yourself, that is what Build a Lead Machine That Cannot Lie is, and members get it free along with every other product I ship. Either way, buy the domain today. The two weeks start the moment you do.