Is t-online.de legit?
You should use caution when browsing t-online.de. While it has good technical foundations, the lack of essential legal pages and visible contact information, combined with potential cloaking elements and mentions of non-reversible payment methods, raises significant concerns about transparency and consumer protection.
News & Media average: 80/100 · based on 32 sites
Checked: April 21, 2026 at 10:18 AM UTC
Is t-online.de a scam? Here's what we found.
The site uses a modern TLS version and has a Content Security Policy, but an excessive number of external scripts and a relatively short-lived SSL certificate warrant some caution.
With a high Tranco rank, the site is clearly well-established, and the basic WHOIS information is present, indicating a clear, public identity.
The site is extremely popular globally and is not blacklisted, suggesting a generally good reputation despite the absence of a Trustpilot profile or Wayback Machine data.
This is a weak area due to no clear contact information, excessive hidden elements, and an absence of a sitemap, making it harder to understand the full scope of the site's content and operations.
The absence of critical legal pages like a privacy policy and terms of service is a major red flag, compounded by the mention of non-reversible payment methods, indicating potential disregard for consumer rights.
The DNS and email configurations are robust, with multiple IPs, MX records, SPF, and DMARC in place. The site is consistently online with fast page load times and a present robots.txt.
Signals Detected
This is one of the most visited websites globally
Site has structured data markup
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 34.246.241.220, 52.209.116.123, 54.217.253.146
Mail servers: mx03.t-online.de., mx00.t-online.de., mx02.t-online.de., mx01.t-online.de.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: dns20.dns.t-ipnet.de., dns02.dns.t-ipnet.de., pns.dtag.de., dns00.dns.t-ipnet.de., dns50.dns.t-ipnet.de.
Valid certificate, expires in 63 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.3
Mentions non-reversible payment methods: bitcoin
Excessive number of external scripts — may indicate malicious injection
Excessive hidden content found — may indicate cloaking or deceptive content
Site has custom branding and social media metadata
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
Web server: envoy
No threats detected by Google Web Risk
robots.txt has 40 directives
No sitemap found — common for smaller sites
Website is live and responding
No obvious contact information found on homepage
No privacy policy or terms of service found
Website links to multiple social media platforms
Not found on any DNS blacklists
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.