Mailbox providers decide whether your cold email reaches the inbox largely by checking whether the sending domain is authenticated. Cold Outreach gates sending behind a domain preflight: a sequence cannot launch from a mailbox whose domain has not passed the SPF, DKIM, and DMARC checks. This protects both your deliverability and the reputation of every other sender on Laureo.

Your mailbox provider (Google Workspace or Microsoft 365) publishes the exact record values you need. Add them at your DNS host, then return to the Mailboxes tab and run the preflight. The check passes once all three records resolve and align.

For cold outbound, the recommended practice is to send from a secondary domain— a lookalike of your primary domain set up specifically for outbound — rather than your main company domain. This keeps any deliverability impact off the domain your team uses for everyday email and transactional mail. If you connect a mailbox on your primary domain, Cold Outreach surfaces a hard warning so the choice is deliberate.

Open and click tracking on cold sequences is served from a custom tracking domain that you own — a subdomain you point at Laureo with a CNAME record. Until you configure and verify a tracking domain, tracking stays off for cold sends. Tracking links and the unsubscribe footer are then built on your verified tracking host, which keeps the links on a domain receivers recognize as yours.

1. Choose a tracking subdomain (for example, link.yourdomain.com).
2. Add the CNAME record Laureo shows you at your DNS host.
3. Return to outreach settings and verify the domain.
4. Once verified, enable tracking on your sequences.

Adding, verifying, retiring, or replacing a tracking domain is a plan feature, and only a teammate with organization-wide outreach access can do it. Everyone else sees the same card in read-only form.

Once a domain is verified, it keeps serving links on every plan. If your plan changes later, campaigns and sequences that already use the host carry on using it, and the one-click unsubscribe header keeps pointing at the same place. Only the ability to change the setup follows the plan. That is deliberate: a billing change should never move the links in mail that has already been delivered.

The card action is Retire. It takes two clicks: the first arms a warning, the second confirms. Retiring turns open and click tracking off for every sequence in the organization straight away. A campaign that had already frozen the host carries on using it for the rest of its sends, which is why the CNAME record has to stay published.

• Leave the CNAME record published. Unsubscribe links in mail you already sent resolve through that record. The card shows the date to keep it until, which is 30 days after the last send that used the host.
• The domain stays claimed by your organization. Retiring does not release the name, so nobody else can pick up a host whose record still points at us and send mail branded with it.
• You can restore it. The retired card carries a Restore action that brings the same host back as pending. Check the record is still published, then verify it again.
• You can set up a different one instead. The retired card also shows the add form. Adding a new host retires the old one for you, so changing domains is one step and there is no limit on how many times you can do it.