Prospect packs / email-security prospects for MSPs

13,096 local businesses whose email can be forged, by metro

For MSPs and IT providers who sell email security. We checked the DNS of 15,217 US small-business domains that receive email: 86% publish no DMARC policy or only monitor (p=none), so nothing tells Gmail or Outlook to refuse a forged invoice in their name. Each row in a pack carries the evidence - the MX host, the SPF record, the DMARC record or its absence - so your first call can name the exact gap.

13,096exposed businesses
8,816no DMARC record at all
4,280DMARC p=none (monitor only)
Pick a metro below for 10 free rows - no payment, no sign-up. Then Order a metro pack ($99): every exposed business we have in that metro, with the mail host, the records and the fix for that host.

Metros

MetroDomains with mailExposedShareOn Microsoft 365
Chicago, IL83675991%113Free 10 rows
Charleston, SC33527081%59Free 10 rows
Minneapolis, MN28925789%45Free 10 rows
Cincinnati, OH30325785%40Free 10 rows
Saint Louis, MO30024682%56Free 10 rows
Columbus, OH28724084%70Free 10 rows
Charlotte, NC27423485%60Free 10 rows
Kansas City, MO28723281%43Free 10 rows
Greenville, SC27122583%44Free 10 rows
Buffalo, NY26021984%35Free 10 rows
Richmond, VA24821888%33Free 10 rows
Milwaukee, WI23921289%50Free 10 rows
Naperville, IL24719880%43Free 10 rows
Ann Arbor, MI21519088%21Free 10 rows
Lincoln, NE22418382%46Free 10 rows
Des Moines, IA21518184%37Free 10 rows
Pittsburgh, PA19717991%27Free 10 rows
Nashville, TN19415881%32Free 10 rows
Raleigh, NC17114283%27Free 10 rows
Madison, WI16513984%20Free 10 rows
Rochester, NY15213589%25Free 10 rows
Houston, TX15712882%33Free 10 rows
Omaha, NE15612479%25Free 10 rows
Baton Rouge, LA15512379%38Free 10 rows
Albany, NY14312185%15Free 10 rows

Where their mail lives

Mail hostExposed businesses
other host5124
Google Workspace4780
Microsoft 3652429
GoDaddy email763

Which businesses

Business typeExposed
Restaurant2756
Cafe590
Bar545
Dentist445
Lawyer400
Clothes332
Place of worship327
Car repair312
Hairdresser304
Other295

Five anonymised rows

Names and domains are hidden here; the pack has them, with the raw records.

TypeDomainMail hostSPFDMARCCity
Graphic designh************.comMicrosoft 365yesp=none (monitor only)Fort Lauderdale
Bakeryk***************.comMicrosoft 365yesp=none (monitor only)Chicago
Cafel***********.comMicrosoft 365nononeMadison
Shoess*************.comMicrosoft 365yesnoneBuffalo
Nightclubc************.comMicrosoft 365yesp=none (monitor only)Greenville

How it works

Method: MX, SPF and DMARC looked up in public DNS for business websites found on public map listings, October 2026. Advertising agencies and IT firms are left out. Full write-up: who is protected, by business type and email host.

Who

Stephen Psaradellis, Arlington Heights, Illinois. The checks are run with an AI system I operate; I am responsible for the data. More on the prospect packs page.

Business names, types and locations (c) OpenStreetMap contributors, https://www.openstreetmap.org/copyright. This pack is a database derived from OpenStreetMap and is made available under the Open Database License (ODbL) 1.0, https://opendatacommons.org/licenses/odbl/1-0/ . The defect columns come from our own scans.