Tutanota

capture taken 51m ago

what the page says

Tuta: Turn ON privacy for free with secure emails, calendars & contacts | Tuta

Tuta guarantees your data stays private for free & without ads. Quantum-resistant encryption makes Tuta the best secure technology solution to protect your privacy.

Tuta Drive is currently in closed beta and will launch publicly in a few months. Products Download Pricing Business Why Tuta Blog Jobs Support Login Sign up Turn ON Privacy Take back your data with Tuta's encrypted email, calendar and contacts. Create free account Secure at a touch Email to feel good about: private and easy to use. End-to-end encryption guarantees your privacy We protect your data to the maximum with quantum-safe encryption. Intuitive design for a fast workflow The ease and simplicity of our apps lead to an organized workflow. Stay connected, wherever you are Use the free…

reachability history

The 4 most recent checks.
When	Status	HTTP	Response	Bytes	Via
51m ago	Alive	200	65 ms	256,350	chrome-stealth
2h ago	Alive	200	56 ms	256,350	chrome-stealth
3h ago	Alive	200	59 ms	256,350	chrome-stealth
5h ago	Alive	200	60 ms	256,350	chrome-stealth

security headers

Csp

Raw

default-src 'none'; script-src 'self' 'sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol/c=' 'sha256-Ya0pUYrC7nM5Cn/056TyVuEiz6dFGrzmkWzgON0pF0U=' 'sha256-VmEf2BGdqVUwcvyhTyarJo/bY7DNqS2+T2sz4IO/kbw=' 'sha256-c/REa9kAvBIV+gZmJKlHkkvmgztM7TzBMXhyF0cx7O0=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-HlNFqGRkRhvOJor1B9Y/Kel20zUIwaMBqtxBhAWTIQI=' 'sha256-xjaDQy32bheY+JozgM9UmBa5vWZ2Q1fkRzLFo7RqzLk=' 'sha256-Q2BPg90ZMplYY+FSdApNErhpWafg2hcRRbndmvxuL/Q=' 'sha256-gPxRf/xXylU+m1MS3X2eO2FaXfC4fdHx0TdnWrwGoOI=' 'sha256-1zEfgAtz+R7o63G9toRQJpODU7qqT5izj2iyBPRy1mQ='; child-src 'self'; frame-src https://*.youtube.com  https://*.vimeo.com; font-src 'self'; img-src http: data: *; media-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; base-uri 'none'; connect-src 'self' https://tuta.com https://tuta.com data: * wss://app.tuta.com https://app.tuta.com https://api.github.com https://www.reddit.com https://mail.tutanota.com wss://mail.tutanota.com;

Directives

Default src: 'none'
Script src: 'self''sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol/c=''sha256-Ya0pUYrC7nM5Cn/056TyVuEiz6dFGrzmkWzgON0pF0U=''sha256-VmEf2BGdqVUwcvyhTyarJo/bY7DNqS2+T2sz4IO/kbw=''sha256-c/REa9kAvBIV+gZmJKlHkkvmgztM7TzBMXhyF0cx7O0=''sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=''sha256-HlNFqGRkRhvOJor1B9Y/Kel20zUIwaMBqtxBhAWTIQI=''sha256-xjaDQy32bheY+JozgM9UmBa5vWZ2Q1fkRzLFo7RqzLk=''sha256-Q2BPg90ZMplYY+FSdApNErhpWafg2hcRRbndmvxuL/Q=''sha256-gPxRf/xXylU+m1MS3X2eO2FaXfC4fdHx0TdnWrwGoOI=''sha256-1zEfgAtz+R7o63G9toRQJpODU7qqT5izj2iyBPRy1mQ='
Child src: 'self'
Frame src: https://*.youtube.comhttps://*.vimeo.com
Font src: 'self'
Img src: http:data:*
Media src: 'self'
Style src: 'self''unsafe-inline'
Frame ancestors: 'none'
Base uri: 'none'
Connect src: 'self'https://tuta.comhttps://tuta.comdata:*wss://app.tuta.comhttps://app.tuta.comhttps://api.github.comhttps://www.reddit.comhttps://mail.tutanota.comwss://mail.tutanota.com

Unsafe inline

yes

Unsafe eval

Hsts

Max age: 63072000
Include subdomains: yes
Preload: yes

X frame options

DENY

X content type options

nosniff

Referrer policy

no-referrer

Cross origin

Cookies

Count: 0
Secure: 0
Httponly: 0
Samesite: 0

Score

72

Missing

permissions_policycoopcoepcorp

tls certificate

Protocol: TLS 1.3
Cipher: AES_128_GCM
Key exchange group: P-256
Signature algorithm: 1027
Subject: tuta.com
Issuer: YE1
San: tuta.com
San count: 1
Wildcard: no
Valid from: 2026-06-17 06:51:47
Valid to: 2026-09-15 06:51:46
Days remaining: 24
Self signed: no
Ct compliance: unknown
Ech: no

technology detected

Server

Family: unknown

Protocol

h2

what blocks us

Detected: no
Confidence: 0
Waited ms: 0
Http code: 200
Via: chrome-stealth

contacts published

Total0

crypto addresses

Total0

forms on the page

Count: 0
Has login: no
Has search: no
Has upload: no

outbound onion links

onion_unique not tracked onion_unique
onion_total not tracked onion_total
clearnet_unique not tracked clearnet_unique 8
internal not tracked internal 30
external not tracked external 18
total not tracked total 78
truncated not tracked truncated

response headers

Header	Value
`accept-ranges`	bytes
`access-control-expose-headers`	Date,app-types-hash
`cache-control`	no-cache,public,no-transform
`content-length`	256350
`content-security-policy`	default-src 'none'; script-src 'self' 'sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol/c=' 'sha256-Ya0pUYrC7nM5Cn/056TyVuEiz6dFGrzmkWzgON0pF0U=' 'sha256-VmEf2BGdqVUwcvyhTyarJo/bY7DNqS2+T2sz4IO/kbw=' 'sha256-c/REa9kAvBIV+gZmJKlHkkvmgztM7TzBMXhyF0cx7O0=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-HlNFqGRkRhvOJor1B9Y/Kel20zUIwaMBqtxBhAWTIQI=' 'sha256-xjaDQy32bheY+JozgM9UmBa5vWZ2Q1fkRzLFo7RqzLk=' 'sha256-Q2BPg90ZMplYY+FSdApNErhpWafg2hcRRbndmvxuL/Q=' 'sha256-gPxRf/xXylU+m1MS3X2eO2FaXfC4fdHx0TdnWrwGoOI=' 'sha256-1zEfgAtz+R7o63G9toRQJpODU7qqT5izj2iyBPRy1mQ='; child-src 'self'; frame-src https://.youtube.com https://.vimeo.com; font-src 'self'; img-src http: data: ; media-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; base-uri 'none'; connect-src 'self' https://tuta.com https://tuta.com data: wss://app.tuta.com https://app.tuta.com https://api.github.com https://www.reddit.com https://mail.tutanota.com wss://mail.tutanota.com;
`content-type`	text/html;charset=utf-8
`date`	Fri, 21 Aug 2026 16:33:28 GMT
`etag`	W/"///+X6jTJLg/////4snmMg"
`last-modified`	Fri, 21 Aug 2026 10:56:46 GMT
`referrer-policy`	no-referrer
`strict-transport-security`	max-age=63072000; includeSubDomains; preload
`x-content-type-options`	nosniff
`x-frame-options`	DENY