A unique address for every company. When the first piece of spam arrives, we don't just block it. We name the source.
Receive-only. No OAuth, no inbox access. Bodies never stored. Your domain, your exit.
The price is printed on day one so "if it's free, you're the product" never applies. Nothing you rely on gets taken away.
| Free | Pro | |
|---|---|---|
| Aliases | 25 | Unlimited |
| Domain | shared whosold.me | your own (BYOD) |
| Leak alerts + expected senders | included | included |
| Activity logs | 90 days | 1 year |
| Price | $0 during beta | ~$5/mo or $48/yr |
Beta users keep Pro free for a year.
Each alias is bound to exactly one company. If a message ever arrives from any other sender, that sender is by definition using an address only that one company ever had. We log it and name them.
During the beta, whosold.me is receive-only: mail forwards to your real inbox and you reply from there. Reply-masking is on the roadmap.
No. We relay over standard SMTP in milliseconds. Mail lands in your inbox as fast as any forward, ARC-sealed so it passes authentication.
The sender, the subject, and the time. Never the message body, never attachments. Nothing to sell, nothing to breach.
Invite-only during the beta. Drop your inbox and we'll admit you in the next batch.