Skip to content

Author

David Lara

Founder of Norbelys. Writes about cold email deliverability, honest analytics, and the unglamorous engineering behind actually landing in the inbox.

Founder at Norbelys

  • Deliverability engineering
  • Email infrastructure
  • Honest analytics

Articles by David Lara

107 articles

Prospecting4 min

Why a bulk email tool isn't built for cold outbound (and what is)

Newsletter-style email marketing tools are built for opted-in batch sends. Cold outbound needs something structurally different. Here's the actual mismatch.

Compliance6 min

California's new AI content law kicks in August 2. Does it touch your outreach?

California's AI Transparency Act becomes operative August 2, 2026, requiring AI content detection and disclosure tools. Here's who it actually covers.

CopywritingAnalysis8 min

The blandest emails in your inbox were written by AI. Direct response is coming back

AI made generic B2B copy free and instantly recognizable. A 2026 copywriting-market split shows specific, direct-response writing is the real counter-trend.

Deliverability7 min

Why sending from five mailboxes beats sending from one

One mailbox has a low daily ceiling no matter how much volume you want to send. Here's how spreading sends across several mailboxes actually protects deliverability.

StrategyAnalysis10 min

Why the best B2B companies are running smaller go-to-market teams in 2026

New 2026 data from 150+ B2B leaders: top-performing companies run go-to-market teams 20-30% leaner than peers at the same revenue. What's actually driving it.

CopywritingField note8 min

Animated GIF signatures, 'Dear [First Name]', and other email fads we all fell for

From mail-merge first names to image-only newsletters to the plain-text comeback: a fond, honest look back at two decades of email marketing trends.

StrategyAnalysis5 min

The FTC just sued a company for quietly sharing customer data with advertisers

The FTC sued Hims & Hers on July 30, 2026 over sharing sensitive data with advertisers. What the case means for B2B teams enriching or sharing prospect data.

Compliance8 min

Cold email for nonprofits: reaching donors and partners without feeling like spam

Nonprofits can email people who've never given before — but the legal rules and the ethical bar are both stricter than most fundraising teams assume.

AI8 min

Your 5-person sales team doesn't need a CRM overhaul, it needs shared visibility

A 3-8 rep sales team doesn't need a full sales-engagement suite to stop duplicate outreach — it needs one shared workspace with real visibility.

StrategyAnalysis5 min

What a founder actually looks at on the analytics dashboard every morning

Not a wall of charts — sent, human opens, replies, bounces, and a funnel that tells you where a campaign is actually losing people.

CopywritingAnalysis8 min

Why 'we cut onboarding time 34%' beats 'we're the best' every time

The psychology of why precise, checkable numbers read as more credible than generic superlatives — and how it changes what a cold email should actually claim.

ProspectingField note6 min

A Big Four firm got breached through its help desk software. Here's the lesson for sales teams

Extortion group ShinyHunters claims it breached EY through a third-party help desk platform, with a deadline set for July 31, 2026. The lesson applies to your stack.

StrategyAnalysis9 min

A defense giant's data breach shows exactly what makes phishing convincing now

RTX Corporation disclosed a breach exposing real employee and customer records — and a preview of how accurate stolen data supercharges phishing.

StrategyAnalysis7 min

Why small outbound teams keep beating big SDR floors

36% of B2B software companies cut SDR headcount in 2025 while output held. The per-rep math behind why lean outbound teams often outperform large ones.

Strategy10 min

Your spreadsheet doesn't know who replied yesterday. A segment does.

Static lists are a snapshot from the day you built them. Dynamic segments update as people reply, click, or go quiet — here's how that works in Norbelys.

StrategyField note6 min

How agencies win new clients without a full-time business development hire

Referrals dry up eventually. Here's how small marketing and creative agencies run their own cold email pipeline instead of waiting for word of mouth.

StrategyAnalysis7 min

The average B2B inbox gets 120+ sales emails a week — do the math on that

Sopro's 2026 research puts the average B2B buyer at 120+ sales emails a week. At that volume, sending more isn't a strategy, it's arithmetic working against you.

Deliverability10 min

Check this number before you check your reply rate

Reply rate tells you how last week's campaign performed. Domain health tells you whether next week's campaign will even reach the inbox. Here's what feeds it.

Strategy6 min

You don't need 500 emails a week, you need five good replies

Independent consultants don't need blast volume — just a handful of well-targeted replies a week. Why a small list needs a different setup, not less effort.

ProspectingAnalysis7 min

Your prospect list might already be sitting in a hacker's leak site

ShinyHunters published a corpus of business contacts stolen from Fluke Corporation's CRM. What that means for cold email lists that overlap with breach data.

StrategyAnalysis5 min

The day Gmail split your inbox into tabs, and what marketers got wrong

Gmail's May 2013 Primary/Social/Promotions split triggered real panic. Here's what the data actually showed, and what senders had to relearn.

ProspectingAnalysis7 min

A sales tool's breach exposed pricing, contacts, and deal notes at dozens of companies

A supply-chain breach at sales-intelligence tool Klue exposed business contacts, pricing quotes, and deal notes across roughly 200 companies' CRMs.

ProspectingField note6 min

Your inbox isn't actually busiest on Monday. It just feels that way

Monday morning feels like the most crowded inbox of the week. The data says something more specific — and it changes when you should actually hit send.

AIField note5 min

What happens when someone flips off the 'ask first' switch on an AI agent

An AI offensive-security agent run with human approval disabled operated unattended inside a government ministry's systems. The lesson applies past security tooling.

StrategyAnalysis9 min

Why the third email in your sequence often beats the first

The psychology of repeated exposure, from Zajonc's original experiments to advertising's three-exposure theory, and why familiarity is doing work your copy isn't.

StrategyAnalysis8 min

A hacked ad script just showed how fragile your marketing stack really is

A single compromised ad-tech script hit every site that had embedded it, with no phishing email and no local weakness. Here's the lesson for your own domain.

AIField note5 min

Small businesses just got an AI 'employee' that posts on its own. Cold email is next

Vendasta's autonomous AI Social Media Manager went live July 29, 2026 with no human review step. Outbound email is a much higher-stakes version of the same bet.

StrategyAnalysis7 min

The AI SDR trust gap: 72% adoption, 46% trust

2026 industry data shows sales teams adopting AI SDRs far faster than they trust them. The gap traces to a specific layer: full autonomy, not AI assistance.

AI10 min

The phishing kit that doesn't need your password, just one code you type in

A phishing-as-a-service kit is hijacking Microsoft 365 mailboxes by abusing a legitimate OAuth flow, no password or malware required. Here's how it works.

Deliverability7 min

The 5,000-email threshold: how to tell if you're a 'bulk sender' to Gmail

Gmail's bulk-sender threshold counts messages to Gmail addresses only, not total sending volume — and the classification doesn't reverse once you cross 5,000/day.

StrategyAnalysis6 min

Global IT spending is about to hit $6.37 trillion. Here's what that means for your prospect's inbox

Gartner forecasts 14.2% IT spending growth in 2026, with AI platforms growing 63%. More sales-tech budget means more automated outreach in the same inboxes.

ProspectingAnalysis8 min

Signal-based outbound is 2026's #1 cold email trend — here's what that actually means

Reports naming signal-based outbound 2026's top trend agree: speed matters most. What a signal concretely is, and why a 48-hour window beats a bigger list.

StrategyAnalysis9 min

Gartner says AI agents will outnumber sellers 10 to 1 by 2028. Most sellers say it hasn't helped yet

Gartner's July 2026 forecast: AI agents outnumber sellers 10 to 1 by 2028, but under 40% of sellers say agents improved productivity. What the gap means.

CopywritingAnalysis7 min

AI text detectors still can't reliably catch AI cold email, and neither can your prospects

2026 research on AI-detection accuracy and recipient trust points the same way: the real lever was never sounding human. It's being relevant to the recipient.

ComplianceAnalysis5 min

Chick-fil-A's loyalty app got hit by the same attack twice. Here's why it keeps working

A credential-stuffing attack hit Chick-fil-A One accounts for the second time in three years. The technique behind it also targets sender and mailbox logins.

StrategyAnalysis10 min

Cold email vs. LinkedIn outreach in 2026: what each one's actually good for

A fair 2026 comparison using real benchmark data: LinkedIn's reply rates look better, but the funnels aren't measuring the same thing. Here's the honest read.

ComplianceAnalysis5 min

"GDPR-compliant" stopped being a universal badge in 2026

The UK's Data (Use and Access) Act and a growing US state patchwork mean the same contact data can be compliant in one market and not another.

ComplianceAnalysis7 min

A €45 million EU AI Act fine headline is circulating. Here's what's actually confirmed

Compliance blogs report a €45M AI Act penalty over training-data errors — unconfirmed by any official decision, though the fine authority behind it is real.

DeliverabilityAnalysis6 min

Gmail's spam-complaint bar just got stricter: 0.1% is now the enforced number

Google Postmaster Tools' new verdict flags a spam rate above 0.1% as high — a number that used to be just a recommended target. What changed since our 0.3% piece.

ComplianceAnalysis7 min

Before it was one click: the messy history of the unsubscribe button

From no opt-out at all, to a buried footer link, to a required header Gmail renders itself: how the unsubscribe button became what it is today.

DeliverabilityAnalysis7 min

You set up bulk-sender compliance in 2024. Here's what's actually changed since.

SPF, DKIM, DMARC, and unsubscribe were the checklist in 2024. By mid-2026: Microsoft joined, Gmail's enforcement hardened, and the spam-rate target tightened.

AIAnalysis9 min

Marketing teams have AI now. They still miss their own deadlines

A July 2026 survey of 300+ enterprise marketers found 85% missed a campaign launch date despite widespread AI use. The bottleneck moved, it didn't disappear.

ProspectingAnalysis5 min

Multichannel outbound reportedly beats single-channel by 287% — what layering touches actually means

2026 benchmarks cite a 287% response-rate lift for multichannel sequences over single-channel outreach, and why email stays the anchor channel.

StrategyAnalysis8 min

Reply rates went from 8.5% to 3.43%: what the trend line actually says

Cold email reply rates have compressed for years — 8.5% in 2019, ~5% by 2025, 3.43% platform-wide in 2026. Why the floor keeps dropping, and what still works.

StrategyField note5 min

You don't need a sales hire to start doing outbound

Most B2B founders run their own outbound until 10-20 customers close before hiring an AE. What that setup actually needs, alone, without sales tooling overhead.

StrategyAnalysis7 min

Three companies control 84% of the AI agent market, says France's competition watchdog

France's competition watchdog found OpenAI, Google, and Anthropic hold over 84% of the AI agent market — what that concentration means for buyers and builders.

AIAnalysis8 min

What to do with 400 business cards after a trade show

Most trade show leads never get a follow-up email at all. How fast you respond, not how good your booth was, decides who actually becomes a customer.

StrategyAnalysis6 min

Voice clones, QR codes, and texts: why 'watch for bad grammar' is dead advice now

Voice cloning, QR fraud, and smishing are 2026's fastest-growing scam vectors, and none are caught by reading copy carefully. What protects a business is process.

ComplianceAnalysis5 min

What a 14-million-account breach at an email platform teaches every sender

KDDI's disclosure that a shared email platform behind six Japanese ISPs was breached shows how credential exposure anywhere becomes a stuffing risk everywhere.

StrategyAnalysis6 min

What buyers actually say about AI-generated outreach, according to 2026 survey data

Gartner's 2026 buyer survey and Validity's 2026 consumer research agree on one thing: AI-generated content isn't the problem on its own. Unverified AI content is.

ComplianceAnalysis5 min

What "internal legacy systems" actually means in a breach notice

Abbott's July 2026 disclosure of two breaches, one traced to legacy systems, decodes a phrase that shows up constantly in breach notices and rarely gets explained.

Deliverability6 min

What you actually see when your DMARC report shows up in Norbelys

Not raw XML — a domain view with every sending source, pass rates, and a plain-language fix. Here's what the dashboard looks like on day one and month three.

ComplianceAnalysis6 min

One phishing click. 6.9 million driver's license numbers.

A single employee's phished login credentials led to the largest driver's license data exposure of the year. What that chain reveals.

Strategy7 min

How many contacts do you actually have? Sizing your plan before you sign up

A worksheet for estimating your real monthly send volume from list size and sequence length, so you pick a Norbelys tier by math instead of a guess.

Compliance6 min

Why you'll never accidentally email someone who already said no

One unsubscribe, one bounce, one manual exclusion — and that address is blocked from every campaign in the workspace, checked again at the moment each message sends.

DeliverabilityAnalysis7 min

Which email client actually matters in 2026 (and why the answer is volatile)

Apple Mail and Gmail account for roughly 90% of tracked opens in 2026, per Litmus, but Apple's share swings 20 points month to month. What that means for testing.

Deliverability8 min

One-click unsubscribe: the header Gmail and Yahoo now require

The List-Unsubscribe headers Gmail and Yahoo made mandatory for bulk senders, what actually satisfies the rule, and how enforcement tightened heading into 2026.

StrategyField note7 min

Why 'I'll get back to you tomorrow' stopped being an acceptable answer

Remote and hybrid work quietly rewrote how fast a reply is expected. The data shows nobody actually voted on the new rule — it just became the norm.

Strategy7 min

Switching from Instantly to Norbelys: a practical migration guide

Moving off Instantly's Outreach + Leads + CRM stack? What maps to what, what to export first, and what genuinely changes on day one — grounded in real pricing.

AIBuild note6 min

How an AI campaign builder turns a one-line brief into a sequence

How a short campaign brief becomes a staged, multi-step cold email sequence — audience criteria, variants, and a review step before anything sends.

AIAnalysis7 min

Do spam filters actually detect AI-written cold email?

Gmail and Outlook's filters run on authentication, complaint rate, and engagement — not a classifier that flags 'sounds like AI.' What actually gets email flagged.

Strategy7 min

Norbelys pricing, explained line by line

What's actually in Starter, Growth and Scale: contacts, sends, campaigns, annual vs. monthly, and what's included free that most cold-email tools charge extra for.

Deliverability8 min

BIMI explained: how a verified logo shows up next to your email

BIMI shows a verified logo next to your email in Gmail and Yahoo, but only after DMARC enforcement. What the record requires and what a VMC costs.

Deliverability7 min

DMARC setup for a new domain before you send your first cold email

SPF, then DKIM, then DMARC at p=none, then watch, then climb: the practical setup sequence for a new domain before its first cold email.

Strategy6 min

Does Norbelys have a free trial? Here's what starting actually looks like

Norbelys doesn't run a free trial — no capped features, no 14-day countdown. Here's exactly what a Starter account unlocks from day one, and why it's built that way.

StrategyAnalysis9 min

Hiring a full-time SDR vs. running outbound with Norbelys: the real cost

What a fully loaded SDR actually costs and how long they take to ramp, compared to what it costs to run consistent outbound with Norbelys instead.

AI9 min

How Norbelys tells a real reply from an out-of-office

A bounce, an auto-responder, and a real reply all land in the same inbox. Here's how Norbelys tells them apart and threads each one correctly.

ComplianceAnalysis6 min

How a canned meat brand ended up naming your junk folder

The real path from a 1937 canned-meat brand to a Monty Python sketch to your inbox, and how the mess it named turned into US federal law in 2003.

ProspectingAnalysis6 min

How top sales reps structure their day (it's not more hustle)

Top-quartile SDRs don't out-dial the average rep by much. The real gap is block scheduling versus reactive switching, per The Bridge Group's 2025 benchmark data.

Deliverability8 min

MTA-STS and TLS-RPT explained: the DMARC of the transport layer

DMARC protects who a message claims to be from. MTA-STS and TLS-RPT protect the connection it travels over — the two DNS records and policy file explained.

Prospecting7 min

Why recruiter outreach gets replies almost nobody else does

Recruiting emails reply at nearly double the average cold email rate — the real numbers, why automation narrows the gap, and the volume math to send safely.

Deliverability8 min

What warmup actually does for you before your first campaign even sends

Warmup isn't a feature you turn on later — it's what decides whether your first real campaign lands in the inbox or the spam folder. Here's what it does.

Prospecting9 min

How wholesale suppliers use cold email to find new business buyers

Trade shows and referrals only reach so far. Here's how wholesale and B2B suppliers use outbound email to find new retail and business buyers.

StrategyBuild note6 min

Why we count opens differently

Apple's Mail Privacy Protection, Gmail's image proxy, and security scanners all fire the same tracking pixel a human does. Why we don't count them the same way.

AIField note9 min

What AI actually changed in a sales rep's day (and what it didn't)

Not another 'AI is changing sales' post. A concrete look at where AI tools actually inserted themselves into a rep's day in 2026, and where the old grind stayed.

Strategy8 min

From connecting a mailbox to your first reply: what actually happens

A concrete, day-by-day walkthrough of a first Norbelys campaign — connecting a mailbox, warmup, building the sequence, the launch, and the first real reply.

Deliverability10 min

What actually happens the week you onboard a new client's domain

The real week-by-week workflow of bringing a new client's sending domain online at an agency — not the billing model, the actual DNS-to-first-send mechanics.

Prospecting7 min

One inbox for every reply you get, no matter which mailbox sent the email

When you send from five mailboxes, replies land in five inboxes — unless you have one place they all funnel into. Here's what that looks like in Norbelys.

Prospecting6 min

How real estate pros use cold email to reach owners, investors, and tenants

Off-market deals, investor updates, and commercial leasing all move on outbound email. How real estate teams run it without landing in spam.

StrategyAnalysis9 min

The real history of email, from a typo test to your inbox today

How email actually began: Ray Tomlinson's 1971 test message, the @ symbol he almost didn't use, SMTP, Hotmail, Gmail, and 55 years to today's inbox.

AIAnalysis5 min

Running cold email from a spreadsheet and an SMTP relay? Here's what actually breaks

A spreadsheet and a generic SMTP relay can send an email. They can't warm up a domain, catch a reply, or tell you your sender reputation is dying. Here's the gap.

StrategyAnalysis5 min

Why email quietly wins for distributed teams (and chat quietly loses)

Real-time chat feels faster, but the research on interruption cost and email stress says the opposite for a specific kind of work: outreach and follow-up.

CopywritingAnalysis6 min

Why people actually hit reply on a cold email

Real research on reciprocity, specificity, and low-effort asks — and why the reasons people actually reply to a cold email aren't the ones most guides teach.

StrategyAnalysis5 min

Why founders outsell their first sales hire (and when that stops being true)

Founders who work their own outbound usually beat a first sales hire for 6-12 months. What they have that a hire doesn't, and the real signal to hand it off.

Strategy7 min

Stop guessing which subject line wins your replies

Norbelys splits variants across your audience and picks a winner from real replies, not opens. How the test, the guardrails, and the promotion work.

Deliverability8 min

How Email Warmup Actually Works: Ramps, Replies, and Safety Controls

Learn how email warmup works, what mailbox providers require, and how Norbelys controls volume, replies, sender health, and campaign capacity.

AIBuild note6 min

Run your entire cold-email operation from an AI agent

Norbelys ships a remote MCP server: one URL that hands Claude, Cursor, or any agent the whole platform as tools — import, verify, segment, launch, monitor.

Prospecting6 min

How to build a cold email lead list that doesn't bounce

A lead list is a pipeline, not a purchase: write the ICP down, source by trigger, verify every address, and build small, specific segments.

Strategy6 min

What is cold email? Definition, legality, and why it isn't spam (when done right)

Cold email is a one-to-one business email to someone who hasn't heard from you — legal under CAN-SPAM, separated from spam by relevance and identity.

Strategy6 min

Cold email reply triage: the four replies your system must handle

Interested, not now, wrong person, and auto-replies should not enter the same workflow. The reply triage model that protects pipeline and sender reputation.

Deliverability7 min

Secondary domains for cold email: never send cold from your main domain

The standard 2026 setup: lookalike secondary domains for outbound, 2-3 mailboxes each, round-robin under 40 sends a day, with the DNS records most guides skip.

Copywriting7 min

Cold email first lines: the opener is the real subject line

Gmail and Outlook show your first line in the preview pane before anyone opens anything. Six rewrites of the lines everyone sends, plus a test for yours.

Deliverability6 min

Your email list rots before you send: clean it or pay in reputation

Why stale B2B lists turn into bounces, role inboxes, burners, and risky domains, how to clean a CSV before launch, and why Norbelys verifies every import.

Strategy8 min

The best time to send cold email, and why it's the smallest lever you have

The real data on send day and hour: weekends are dead, mid-week mornings win. But list quality, personalization, and follow-ups move replies far more.

Deliverability7 min

Email warmup week one: the ramp, the safety gates, and what the numbers do not prove

Norbelys starts at a base target of 5 and adds 2 per ramp day, though volume can be lower — why capacity, cohorts, and health matter more than a perfect chart.

Strategy6 min

The follow-up curve: where a cold sequence's replies actually come from

A 4–7-step sequence roughly doubles a one-and-done, 42% of replies come from follow-ups, and one extra touch lifts replies 65.8%. The curve, and where to stop.

Strategy7 min

Cold email subject lines by the numbers: length, questions, and reply rate

What a 12-million-email study can and cannot tell us about subject-line length and personalization, plus the rule every benchmark survives: test your own list.

Deliverability6 min

How to read email headers like a postmaster

Received chains read bottom-to-top, Authentication-Results don't lie, and a five-minute header read explains most delivery mysteries. A field guide.

Deliverability6 min

Half of your email opens are robots. Here's how to find the real number.

Apple Mail auto-opens every email, Gmail caches images, and security scanners click every link. What's left once you filter the noise — and how to decide on it.

Deliverability6 min

Email blacklists: how to check if you're listed — and actually get off

Which DNS blocklists matter in 2026, how to check your domain and IPs in one sweep, and the delisting process that works (it's free, despite what some sites imply).

Deliverability6 min

The Gmail & Outlook sender rules, explained like you're busy

SPF, DKIM, DMARC, one-click unsubscribe and the 0.3% spam threshold — what mailbox providers actually require from senders now, in plain language.

Deliverability6 min

Why your emails go to spam (it's rarely the words)

Spam placement in 2026 is mostly reputation, authentication and engagement — not trigger words. A diagnostic order that finds your real problem in 20 minutes.

Deliverability7 min

How long does it take to warm up a new email domain?

Use two weeks as a minimum for a low-volume mailbox and four to eight weeks for a new or high-volume domain. The real answer depends on volume and engagement.

Deliverability6 min

How to read a DMARC report (no XML degree required)

Gmail, Microsoft and Yahoo send you gzipped XML about every email claiming to be your domain. Here are the four fields that matter and how to spot a spoofer.

Deliverability6 min

p=none vs p=quarantine vs p=reject: when to move (and when not to)

More than half of domains with DMARC never leave p=none. Here's the honest ladder from monitoring to enforcement, with the checks to pass before each step.

Deliverability6 min

DKIM, explained: selectors, key sizes and the failures nobody notices

How DKIM signing actually works, what a selector is, why 1024-bit keys are on borrowed time, and how to check the key your domain is really using.

Deliverability8 min

SPF records, explained with real examples (and the 10-lookup trap)

What an SPF record actually says, how to read every mechanism, copy-paste examples for common stacks — and the DNS lookup limit that silently voids it.