According to Live Direct Marketing's daily Tranco top-1M scan (July 13, 2026), FireEye / Trellix is the email service provider (ESP) for 160 domains — 0.03% of 617,702 SPF-publishing domains. Detection method: include: mechanisms in the SPF record.
Trellix is an email service provider whose infrastructure appears in the SPF records of websites delegating email authentication and transmission to its platform. It operates internationally across many top-level domains, with .com predominant in its adoption footprint.
Rather than serving the largest enterprise brands, Trellix's presence concentrates in smaller and mid-market organisations distributed across multiple regions. For email deliverability professionals and mailbox operators, Trellix represents a consistent authentication infrastructure component, making its reputation patterns and configuration relevant to anyone evaluating mail flow across diverse sender networks.
| Tranco rank band | Domains | Share of its base |
|---|---|---|
| Top 1,000 | 0 | 0.0% |
| Top 10,000 | 2 | 1.2% |
| Top 100,000 | 24 | 15.0% |
| Top 1,000,000 | 123 | 76.9% |
| Unranked | 11 | 6.9% |
| TLD | Domains | Share | |
|---|---|---|---|
| .com | 44 | 27.5% | |
| .com.br | 18 | 11.2% | |
| .pl | 11 | 6.9% | |
| .co.jp | 8 | 5.0% | |
| .br | 7 | 4.4% | |
| .de | 4 | 2.5% | |
| .bg | 4 | 2.5% | |
| .co.uk | 3 | 1.9% | |
| .com.ph | 3 | 1.9% | |
| .me | 3 | 1.9% |
Cross-tabulated from the same daily snapshot — the other email services seen on the same 160 domains.
| Type | Service | Domains | Share of FireEye / Trellix users |
|---|---|---|---|
| Mailbox | FireEye | 111 | 69.4% |
| Mailbox | Microsoft 365 | 22 | 13.8% |
| Mailbox | Proofpoint | 6 | 3.8% |
| Mailbox | Unknown / Other | 6 | 3.8% |
| Mailbox | Google Workspace | 4 | 2.5% |
| Mailbox | Self-Hosted | 3 | 1.9% |
| ESP | Salesforce | 17 | 10.6% |
| ESP | Amazon SES | 16 | 10.0% |
| ESP | SendGrid (Twilio) | 13 | 8.1% |
| ESP | Zendesk | 8 | 5.0% |
When a domain lists Trellix in its SPF record, it authorises Trellix infrastructure to send mail on that domain's behalf. Mailbox providers evaluate Trellix as a sender based on aggregate reputation across all its customers, meaning that poor practices by one Trellix customer can affect deliverability for others using the platform. This shared-infrastructure model means Trellix's own authentication practices and customer vetting directly influence email reputation for all its senders.
See the full FireEye / Trellix data page (KPI cards, trend, sample domains) →
Trellix is an email service provider that appears in SPF records when domains authorise it to send mail on their behalf. Its shared-infrastructure model means it operates as a consistent authentication component for smaller and mid-market organisations internationally.
160 domains in the Tranco top-1M use FireEye / Trellix as their email service provider (ESP) as of July 13, 2026 (0.03% of SPF-publishing domains), according to Live Direct Marketing's daily DNS scan.
FireEye / Trellix accounts for 0.03% of SPF-publishing domains in the top 1M. Whether you should seed a test mailbox there depends on how much of your audience it represents — the co-usage table above shows the services it appears alongside most.
FireEye / Trellix's largest TLD is .com (27.5% of its domains); it appears across 52 TLDs in total.