Prospect packs / email-security prospects for MSPs
13,096 local businesses whose email can be forged, by metro
For MSPs and IT providers who sell email security. We checked the DNS of 15,217 US small-business domains that receive email: 86% publish no DMARC policy or only monitor (p=none), so nothing tells Gmail or Outlook to refuse a forged invoice in their name. Each row in a pack carries the evidence - the MX host, the SPF record, the DMARC record or its absence - so your first call can name the exact gap.
Metros
| Metro | Domains with mail | Exposed | Share | On Microsoft 365 | |
|---|---|---|---|---|---|
| Chicago, IL | 836 | 759 | 91% | 113 | Free 10 rows |
| Charleston, SC | 335 | 270 | 81% | 59 | Free 10 rows |
| Minneapolis, MN | 289 | 257 | 89% | 45 | Free 10 rows |
| Cincinnati, OH | 303 | 257 | 85% | 40 | Free 10 rows |
| Saint Louis, MO | 300 | 246 | 82% | 56 | Free 10 rows |
| Columbus, OH | 287 | 240 | 84% | 70 | Free 10 rows |
| Charlotte, NC | 274 | 234 | 85% | 60 | Free 10 rows |
| Kansas City, MO | 287 | 232 | 81% | 43 | Free 10 rows |
| Greenville, SC | 271 | 225 | 83% | 44 | Free 10 rows |
| Buffalo, NY | 260 | 219 | 84% | 35 | Free 10 rows |
| Richmond, VA | 248 | 218 | 88% | 33 | Free 10 rows |
| Milwaukee, WI | 239 | 212 | 89% | 50 | Free 10 rows |
| Naperville, IL | 247 | 198 | 80% | 43 | Free 10 rows |
| Ann Arbor, MI | 215 | 190 | 88% | 21 | Free 10 rows |
| Lincoln, NE | 224 | 183 | 82% | 46 | Free 10 rows |
| Des Moines, IA | 215 | 181 | 84% | 37 | Free 10 rows |
| Pittsburgh, PA | 197 | 179 | 91% | 27 | Free 10 rows |
| Nashville, TN | 194 | 158 | 81% | 32 | Free 10 rows |
| Raleigh, NC | 171 | 142 | 83% | 27 | Free 10 rows |
| Madison, WI | 165 | 139 | 84% | 20 | Free 10 rows |
| Rochester, NY | 152 | 135 | 89% | 25 | Free 10 rows |
| Houston, TX | 157 | 128 | 82% | 33 | Free 10 rows |
| Omaha, NE | 156 | 124 | 79% | 25 | Free 10 rows |
| Baton Rouge, LA | 155 | 123 | 79% | 38 | Free 10 rows |
| Albany, NY | 143 | 121 | 85% | 15 | Free 10 rows |
Where their mail lives
| Mail host | Exposed businesses |
|---|---|
| other host | 5124 |
| Google Workspace | 4780 |
| Microsoft 365 | 2429 |
| GoDaddy email | 763 |
Which businesses
| Business type | Exposed |
|---|---|
| Restaurant | 2756 |
| Cafe | 590 |
| Bar | 545 |
| Dentist | 445 |
| Lawyer | 400 |
| Clothes | 332 |
| Place of worship | 327 |
| Car repair | 312 |
| Hairdresser | 304 |
| Other | 295 |
Five anonymised rows
Names and domains are hidden here; the pack has them, with the raw records.
| Type | Domain | Mail host | SPF | DMARC | City |
|---|---|---|---|---|---|
| Graphic design | h************.com | Microsoft 365 | yes | p=none (monitor only) | Fort Lauderdale |
| Bakery | k***************.com | Microsoft 365 | yes | p=none (monitor only) | Chicago |
| Cafe | l***********.com | Microsoft 365 | no | none | Madison |
| Shoes | s*************.com | Microsoft 365 | yes | none | Buffalo |
| Nightclub | c************.com | Microsoft 365 | yes | p=none (monitor only) | Greenville |
How it works
- Email s.n.psaradellis@gmail.com or use a link above. Name the metro, a business type or mail host if you want one, and your company.
- Every domain is re-checked before it ships, so one that added DMARC since is dropped, not sold.
- No personal email addresses are sold, and any business that asked not to be contacted is removed.
- Pay by card after you have seen the free rows: $99 per metro.
Method: MX, SPF and DMARC looked up in public DNS for business websites found on public map listings, October 2026. Advertising agencies and IT firms are left out. Full write-up: who is protected, by business type and email host.
Who
Stephen Psaradellis, Arlington Heights, Illinois. The checks are run with an AI system I operate; I am responsible for the data. More on the prospect packs page.
Business names, types and locations (c) OpenStreetMap contributors, https://www.openstreetmap.org/copyright. This pack is a database derived from OpenStreetMap and is made available under the Open Database License (ODbL) 1.0, https://opendatacommons.org/licenses/odbl/1-0/ . The defect columns come from our own scans.