The advice to "age your domain for 90 days before sending" is one of the most repeated and least understood rules in cold email. It implies that simply owning a domain for three months confers reputation. It does not. Gmail, Outlook, Yahoo and the major filters do not check your WHOIS record before deciding where to deliver mail. They check sending history — and a 90-day-old domain that has never sent a single message is functionally identical to one registered yesterday.
Gmail trust is built on first-send age, not WHOIS age. Real milestones land at roughly 30 days (Postmaster begins showing reputation), 90 days (Medium reputation is achievable with consistent sending), and 180 days (a stable High reputation is realistic). Engagement quality matters more than calendar time.
What "domain reputation" actually means
Domain reputation is a per-recipient-domain score that mailbox providers attach to your sending domain. Gmail's Postmaster Tools exposes four buckets — Bad, Low, Medium, High — but those are coarse rollups of dozens of underlying signals. Outlook maintains its own internal reputation through SmartScreen and the SNDS network. Yahoo, Mail.ru and others run similar models.
The key inputs are roughly the same everywhere:
- Engagement rate — replies, stars, folder moves out of spam, time spent reading. Replies dominate.
- Complaint rate — "mark as spam" events. Anything over 0.1% is a problem; over 0.3% is catastrophic.
- Authentication consistency — SPF, DKIM and DMARC all aligned and passing for every message, every time.
- Volume stability — sudden spikes or drops are themselves signals; consistent send volume scores better than jagged volume even if the totals match.
- Bounce rate — over 2% on a campaign indicates list quality issues and starts to weigh against the domain.
None of those have anything to do with how old the WHOIS record is. A domain with three years of clean sending and a 12% reply rate beats a five-year-old dormant domain every single time.
WHOIS age vs first-send age
The thing filters genuinely care about is "first-send age" — how long since the first authenticated message left this domain. Gmail begins building a reputation profile from that first message and uses around 30 days of sending history before showing anything in Postmaster Tools. Before that 30-day threshold, the domain is treated cautiously: messages can land in spam unpredictably, and the filter is gathering evidence.
WHOIS age is checked by some adversarial signals — domains registered hours before sending get extra scrutiny — but a domain registered six months ago and a domain registered last week, both starting to send today, will end up with broadly similar reputation curves over the next 90 days. The lever is sending behaviour, not registration date.
The 30-day milestone: Postmaster goes live
Around day 30 of consistent sending, Google Postmaster Tools starts showing data for your domain. Before that you see a message about "not enough data". Hitting this point without any visible reputation tag is normal; getting flagged Bad immediately is not normal and means something is broken (auth failure, complaint spike, or sending to a poisoned list).
At 30 days, a healthy domain looks like this:
- Postmaster reputation: Low or Medium.
- Spam rate visible in Postmaster: well under 0.3%.
- SPF, DKIM, DMARC all at 99–100% pass.
- Encryption rate at 100% (TLS is not optional in 2026; Gmail downgrades plaintext).
- No blacklist hits at Spamhaus, Barracuda, URIBL.
If you're below those bars at day 30, no amount of waiting will fix it. Diagnose now or you compound the damage.
The 90-day milestone: Medium reputation, not magic
Day 90 is where the "90-day rule" comes from. By this point, with consistent volume and good engagement, a healthy domain can hold a stable Medium reputation in Postmaster — and Medium is the practical floor for serious cold outreach. Messages from Medium domains land in inbox at Gmail at roughly 85–95% on engaged segments, dropping into the 50–70% range as list quality drops.
What Day 90 is not: a one-way ratchet. A domain that hits Medium at day 90 can drop back to Low in two weeks if you suddenly send 20× volume to a cold list. The reputation is a moving average over the trailing 30 days at minimum.
Sitting on a domain for 90 days without sending does nothing. We've seen domains aged six months in a parked state immediately tank to Bad reputation when their first 1,000- message campaign went out. Calendar time is not a substitute for a warm-up curve.
The 180-day milestone: stable High
Around day 180 a well-run domain reaches a stable High reputation — and a stable High is what allows the kind of sending behaviour that breaks newer domains: moderate volume bursts during launches, occasional cold-list re-engagement, the flexibility to recover from a bad week without a ratings collapse.
High reputation is not a permanent badge. It can be lost in 7–14 days of sustained bad sending. But the inertia works for you: once at High, the domain absorbs a single bad campaign without immediately falling. That cushion is what 180 days of clean history actually buys.
What affects the shape of the curve
Two domains starting on the same day with the same WHOIS age can end up at wildly different reputation levels at day 90. The variables that matter:
- Recipient engagement rate. A 10%+ reply rate accelerates trust dramatically. A 1% reply rate flattens the curve.
- List hygiene. Even one campaign with 5% bounces sets you back weeks.
- Complaint rate. A single percent of complaints is catastrophic — and cold lists routinely produce that.
- Send pattern consistency. Same hours, same days, same per-inbox volume.
- Authentication. Any DKIM failure event resets a chunk of trust.
Outlook, Yahoo, and the rest
Outlook (consumer Hotmail/Live/Outlook.com) is famously slower to grant trust than Gmail. Expect a similar 30/90/180 cadence but with a noticeably steeper engagement requirement and a much lower tolerance for complaints. Outlook's SmartScreen will send messages to Junk for months from a new domain, even with clean signals — this is the cost of doing business with consumer Microsoft.
Yahoo and AOL share filtering infrastructure and tend to follow Gmail's lead within a week or two. Mail.ru and Yandex have their own postmaster portals and behave more like Outlook in their conservatism. Privacy-first providers (ProtonMail, Fastmail, Tutanota) usually defer to upstream signals (DNSBL, SPF/DKIM/DMARC) and care less about per-domain history.
The cheap way to monitor the curve is a real seed test across 20+ providers at days 7, 14, 30, 60, 90 and 180. The shape of the inbox-rate curve tells you whether you're on track before Postmaster catches up.