Cloudflare email DNS for cold email (2026): prices and setup

What Cloudflare is

Cloudflare is a network and security company that runs a free DNS service and a domain registrar selling names at the price the registry charges. For cold email those are the two jobs that matter: a cheap, honestly priced home for secondary domains, and a DNS dashboard where SPF, DKIM, DMARC and MX records take seconds to add. It sells no sending mailboxes. It is where the domains under them live.

Cloudflare Registrar pricing

Cloudflare Registrar passes on the registry and ICANN fees and adds nothing. A .com costs $10.46 a year to register and $10.46 to renew, a .net $11.86, and a .org $8.50 for the first year then $11.20, which is a registry promotion rather than a Cloudflare one. Extensions with rules of their own keep them: an .ai costs $160 for the required two years, then $80 a year. WHOIS redaction, DNSSEC and DNS hosting come free with every domain, and domains are locked against transfer until you unlock them.

The paid plans are for websites. Pro at $20 a month billed yearly and Business at $200 add performance and security features a cold email domain never uses, so outreach domains stay on the Free plan. Renewals are automatic by default, and the money side is strict: Cloudflare says registration, renewal and transfer fees are non-refundable and every renewal is final.

Email DNS records on Cloudflare

Every mail provider hands you the same handful of records: MX for incoming mail, an SPF TXT record, DKIM as a TXT record or a pair of CNAMEs, and a DMARC TXT record. In Cloudflare they go into the DNS tab, or in bulk through the API with a token scoped to DNS edits. MX and TXT records are always DNS-only. The trap is the orange cloud on everything else: a DKIM CNAME, like the pair Microsoft 365 asks for, or a mail host left proxied answers with Cloudflare’s own addresses, and authentication fails. Set every mail-related A and CNAME record to DNS only.

Two free tools help after setup. DMARC Management collects the reports receiving servers send back and shows which services pass SPF, DKIM and DMARC as your domain. Email Routing forwards addresses on the domain to an inbox you already read, which suits secondary domains that receive replies but do not host mailboxes of their own.

Cold email considerations

Buy .com, with .net as the fallback, because both are flat-priced here and both are what filters expect. Keep WHOIS redaction on, which is the default, and redirect the root of each outreach domain to your main site so a curious prospect lands somewhere real. The one structural catch is nameservers. A domain registered at Cloudflare must use Cloudflare’s nameservers, and some inbox providers set up a domain by asking you to point the nameservers at them. With a Cloudflare domain, give them a scoped API token or add their records yourself instead, or register those particular domains at another registrar.

Who Cloudflare is for, and who should look elsewhere

Cloudflare suits anyone buying outreach domains who wants .com at cost with honest renewals, free DNS and an API, and is content to keep DNS at Cloudflare. It is a poor fit for buyers who might need a refund, or for setups where the inbox provider must take over the domain’s nameservers. Porkbun is the alternative with a 96-hour refund window and the option of outside nameservers, and the email platforms and registrars category lists the other hosting-side tools. Spaceship is cheaper still on .com, at $8.88 the first year and $9.98 to renew, and lets you choose your own nameservers.

Using Cloudflare with PureMail

PureMail asks you to bring your own domains and lists Cloudflare among the registrars it works with. Register or transfer the outreach domains at Cloudflare, keep their DNS there, and hand them to PureMail, whose team configures SPF, DKIM, DMARC and MX for the Google Workspace or Microsoft 365 inboxes it supplies. Leave every mail-related record set to DNS only, and switch on DMARC Management to see which services send as your domains.