Xevolution · Free file 01

The Target List Standard

Most outreach that fails was decided before the first email ever went out — on the list. This is the standard I hold a list to, given here in full. It is file 01 of seven in The Outreach Operating System. There is no price on this page and nothing to sign up for.

If you cannot write down the exact page where an address appeared, it is not a lead — it is a guess. Delete it.

The Outreach Pack writes the email. This is where you get the addresses, and what makes an address legitimate enough to send to without harming your domain.

The only kind of list worth building

A legitimate address is one the business published itself, on purpose, for exactly this:

A mailto: link or a contact form address on the business's own site.
A named person's address in a team page, staff directory, about page, or signature.
An address printed in a document the business distributes (proposal, deck, price sheet).
An address a person gave you directly: conference list, reply to your post, a referral.

Every one of those has a source URL you can log. If you cannot write down the exact page where the address appeared, it is not a legitimate address, it is a guess. Delete it.

What never goes on your list

Source	Why not
A purchased list	You did not obtain consent, the addresses are stale or trap-laden, and one spam-trap hit can blackhole your domain for months.
A scraped dump of a directory	The address was published for people to look up an individual, not to receive bulk mail. High complaint rate.
An address guessed from a pattern (firstname@domain)	Bounces. Enough bounces and the provider throttles you, then blocks you.
Any list a vendor sold you as "opted in"	You cannot show the opt-in. In the US you carry the burden of proof.
An address from a role inbox you never verified	info@ often does not exist. Verify it first (see below).

Build order (do it in this order, not the reverse)

Define the buyer in one sentence. Not "SMBs" — "owner of a 5-to-40-person B2B services firm that already sends cold email and complains it does not work."
Pick three sources you can search. Company registry, a niche directory, LinkedIn search, conference attendee pages, "powered by" footers. Three, not ten.
Gather 40 to 60 raw rows into a spreadsheet with these exact columns: company · domain · person · role · address · source_url · date_found · verified · notes.
Verify every address before it enters the send list. Look the domain up on its own site and confirm the address appears; if you have a verifier available, run it and drop anything that is not valid. A 5 percent bounce rate is a warning; 10 percent is an emergency.
Dedupe on the domain, not the address. Two people at one company are one company. Send to the one who owns the problem.
Log the source URL for every single row, no exceptions. When someone asks "how did you get my address", the answer is a URL you can paste, not a shrug. This one habit is the difference between outreach and spam.

Sizing, honestly

A first batch is 20 to 30 sends, not 500. You are learning whether the offer lands, and a small batch is reversible.
Expect 40 to 60 percent of a raw list to survive verification. Plan to gather roughly twice what you intend to send.
A hundred good rows beats a thousand scraped ones, always, at every volume.

The line not to cross

If gathering the list requires you to do something you would not want done to your own inbox, stop. That instinct is the whole compliance standard compressed into one sentence.

File 01 of seven. Quoted in full from The Outreach Operating System by Xevolution. No tracking, no email capture, no expiry — save it, print it, keep it next to whatever you send from.

The other free files: the 90-Day Sending Calendar and the inbox triage decision tree start at /free; the Objection Library is at /free/objection-library, the Permission and Compliance Sheet at /free/permission-and-compliance-sheet, and the Failure Runbook at /free/failure-runbook. Questions about your own setup: support@xevolution.biz