According to Live Direct Marketing's daily Tranco top-1M scan (July 12, 2026), Sophos Reflexion is the email service provider (ESP) for 55 domains — 0.01% of 617,244 SPF-publishing domains. Detection method: include: mechanisms in the SPF record.
Sophos Reflexion is an email security gateway operated by Sophos, a UK-based cybersecurity firm. It sits between an organisation's mail servers and the internet, screening inbound and outbound email for threats such as spam, malware, and phishing. Organisations using Reflexion publish SPF include mechanisms to delegate email routing through Sophos's filtering infrastructure.
Reflexion's SPF footprint is concentrated in the smaller-to-medium business segment rather than among large enterprises, with particular prevalence in the .com space and frequently deployed alongside Microsoft 365. For email senders and deliverability teams, Reflexion's presence indicates that a recipient has prioritised perimeter-level email threat filtering as part of their overall security posture.
| Tranco rank band | Domains | Share of its base |
|---|---|---|
| Top 1,000 | 0 | 0.0% |
| Top 10,000 | 0 | 0.0% |
| Top 100,000 | 6 | 10.9% |
| Top 1,000,000 | 45 | 81.8% |
| Unranked | 4 | 7.3% |
| TLD | Domains | Share | |
|---|---|---|---|
| .com | 40 | 72.7% | |
| .org | 11 | 20.0% | |
| .net | 4 | 7.3% |
Cross-tabulated from the same daily snapshot — the other email services seen on the same 55 domains.
| Type | Service | Domains | Share of Sophos Reflexion users |
|---|---|---|---|
| Mailbox | Microsoft 365 | 32 | 58.2% |
| Mailbox | Forward Email | 4 | 7.3% |
| Mailbox | Proofpoint | 4 | 7.3% |
| Mailbox | Sophos Email | 3 | 5.5% |
| Mailbox | Unknown / Other | 3 | 5.5% |
| Mailbox | Mimecast | 2 | 3.6% |
| ESP | Mailchimp | 9 | 16.4% |
| ESP | Mandrill | 6 | 10.9% |
| ESP | HubSpot | 6 | 10.9% |
| ESP | SendGrid (Twilio) | 6 | 10.9% |
When Reflexion is present in an organisation's SPF chain, sender authentication and reputation evaluation occurs at both the Sophos gateway and the underlying mail provider. This means your sender reputation—as tracked across Sophos's entire customer base—becomes part of the delivery decision, even if you maintain good standing with the direct recipient domain. Delivery issues that persist despite strong authentication elsewhere may indicate your IP or domain reputation within Sophos's threat intelligence system requires attention.
See the full Sophos Reflexion data page (KPI cards, trend, sample domains) →
Reflexion is an email gateway filter, so organisations using it evaluate inbound mail against Sophos's proprietary threat intelligence in addition to their primary mail provider's checks. Direct testing against Reflexion is impractical as filtering rules vary per customer, but maintaining strong sender authentication and reputation will ensure delivery through it and all other gateways.
55 domains in the Tranco top-1M use Sophos Reflexion as their email service provider (ESP) as of July 12, 2026 (0.01% of SPF-publishing domains), according to Live Direct Marketing's daily DNS scan.
Sophos Reflexion accounts for 0.01% of SPF-publishing domains in the top 1M. Whether you should seed a test mailbox there depends on how much of your audience it represents — the co-usage table above shows the services it appears alongside most.
Sophos Reflexion's largest TLD is .com (72.7% of its domains); it appears across 3 TLDs in total.