Skip to main content

Is richmedia-plus.de a Scam? Security Check Results - DER PUNKT GmbH Reviews

richmedia-plus.de favicon

Is richmedia-plus.de Safe? Security Analysis for DER PUNKT GmbH

Check if richmedia-plus.de is a scam or legitimate. Free security scan and reviews.

OtherGermanymedium
HTML5CSS3JavaScriptjQueryGoogle Tag Manager+3 more
Analyzed 8/1/2025Completed 5:06:32 PM
42
Security Score
HIGH RISK

AI Summary

DER PUNKT GmbH is a well-established advertising and design agency based in Karlsruhe, Germany, founded in 1999. The company offers a broad range of services including marketing, corporate design, web design, print media, database solutions, presentations, video production, and mobile app development. With a medium-sized team of approximately 26 employees, DER PUNKT serves both medium-sized businesses and large corporations, positioning itself as a leading agency in the Southwest German market. Their client portfolio includes major brands such as Adidas, BASF, Lufthansa, and Mercedes-Benz, underscoring their strong market presence and credibility. Technically, the website is built on modern web standards using HTML5, CSS3, JavaScript, and jQuery, with TYPO3 as the CMS platform. The site integrates Google Analytics and Google Tag Manager for analytics and tracking, and employs Klaro for cookie consent management, demonstrating a mature digital infrastructure. The site is mobile-optimized and features good SEO and accessibility practices, although accessibility could be further enhanced. From a security perspective, the website uses HTTPS with a strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, there is no publicly available formal security policy or incident response information, and security headers are not explicitly detected. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data aligns well with the business claims, showing consistent domain registration since 1999, reinforcing the legitimacy of the entity. Overall, DER PUNKT GmbH presents a professional, trustworthy, and compliant online presence with strong business credibility and a solid technical foundation. Strategic improvements could include publishing formal security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility and security headers to further strengthen their security posture and compliance.

Detected Technologies

HTML5CSS3JavaScriptjQueryGoogle Tag ManagerGoogle AnalyticsTYPO3 (CMS)Klaro Cookie Consent

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

DER PUNKT GmbH operates as a full-service advertising agency with a diversified service portfolio targeting medium and large enterprises across various industries. Their competitive advantage lies in their long-standing market presence, comprehensive service offerings combining creative and technical expertise, and a strong client base featuring well-known corporations. The business model is service-oriented, focusing on customized marketing, design, and technical solutions. Revenue streams likely derive from project-based contracts and ongoing client engagements. The company maintains a robust partnership ecosystem with related platforms such as jobsaround.tv and arbeitgeberleben.de, enhancing their service reach. Growth indicators include a stable team size and continuous recognition through industry awards. Strategic observations suggest a focus on digital transformation and multimedia content production as key growth drivers.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

m*****@derpunkt.de

Phone Numbers (2)

+4972151****
+4972151****

Company Registration

Legal Name:

DER PUNKT GmbH

VAT Number:

DE203879784

Registration Number:

HRB109033

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate to strong security posture with HTTPS enforced and cookie consent implemented via Klaro, supporting GDPR compliance. The absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for maturity improvement. No critical vulnerabilities or exposed sensitive data were detected. The use of Google Analytics and Tag Manager is transparent and disclosed in the imprint. Security headers are not explicitly present, which could be enhanced to mitigate common web threats. Overall, the security culture appears adequate for the business size and industry but would benefit from formalized policies and improved technical controls.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish a formal security policy and incident response plan accessible on the website.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

DER PUNKT GmbH

Description:

Die DER PUNKT GmbH ist seit fast 20 Jahren eine der führenden Agenturen im Südwesten Deutschlands. Mit rund 30 Mitarbeitern entwickeln sie analoge und digitale Medien mit Herzblut. Sie bieten Dienstleistungen in den Bereichen Print- und Webdesign, HTML-/TYPO3-/PHP-Programmierung sowie Flash-Entwicklung.

Key Services:
Marketing & WerbungCorporate DesignWebdesignPrintmedienDatenbanklösungenPräsentationenVideo & FilmMobile Apps
Content Quality:

excellent

Branding:

consistent

Technical Stack

Technologies:
HTML5CSS3JavaScriptjQueryGoogle Tag ManagerGoogle AnalyticsTYPO3 (CMS)Klaro Cookie Consent
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
80/100
Best Practices:
  • HTTPS enabled
  • Cookie consent banner implemented
  • No exposed sensitive data in HTML
  • Use of Google Tag Manager for controlled analytics

Analytics & Tracking

Services:
Google AnalyticsGoogle Tag Manager
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Marketing Tools:
Klaro Cookie Consent
Transparency Level:good

Website Quality Assessment

Design Quality:excellent
User Experience:excellent
Content Relevance:excellent
Navigation Clarity:excellent
Professionalism:excellent
Trustworthiness:high

Key Observations

1

Website is fully accessible with rich content and multimedia.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

43/100
Score

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Data Protection Officer mentioned

LOW

Large organizations may need to designate a DPO under GDPR

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: energy, transport, banking, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

70/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 mx a ?all
DNS Lookups:2/10
Policy:?all

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

72/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 59 days

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

45/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

Weak SPF Policy

HIGH

SPF record has permissive policy allowing any server to send email

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Protection Level
none
Suspicious Indicators Detected
  • No domain protection locks enabled

DNS Records

A Records:85.13.141.27
Name Servers:
ns3.ai-dns.de
ns5.kasserver.com
ns5.name-server-kas.de
ns6.kasserver.com
MX Records:
10: w00ab7ec.kasserver.com
SOA:Serial: 2507111125, TTL: 7200s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:45ms

SPF Analysis

SPF Record:
v=spf1 mx a ?all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

High-Risk Service Exposed: NetBIOS

HIGH

Port 139 (NetBIOS) is publicly accessible - NetBIOS - Windows file sharing

Critical Service Exposed: SMB

CRITICAL

Port 445 (SMB) is publicly accessible - SMB - Windows file sharing, high risk

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a solid technical foundation using TYPO3 CMS, modern HTML5, CSS3, and JavaScript frameworks including jQuery. It integrates Google Tag Manager and Google Analytics for tracking and marketing insights, and Klaro for cookie consent management, reflecting compliance with privacy regulations. The hosting is likely provided by kasserver.com based on nameserver data. Performance is moderate with multimedia content such as videos and animations, and the site is mobile-optimized with responsive design elements. Technical debt appears low, but opportunities exist to improve accessibility and security headers. The site structure and metadata are well-formed, supporting SEO and social media integration through Open Graph and JSON-LD structured data.
Analyze Another Website