These are ccTLDs, though, ICANN is out of the picture there, they have no authority after delegation. It's the fault of DENIC, the German ccTLD local operator. DENIC is a German entity, they are very much within reach of regulators.
(That's also the reason why foreign ccTLDs of, eh, semi-stable countries, e.g. .so domains, are risky - should the local operator start to lose it at some point, no-one can help you, neither ICANN nor IANA)
The domain registry isn't even relevant here - the authorities can go directly after Liferando - who are doing business in Germany - no matter what TLD or other medium they use for their fraud.
(That's also the reason why foreign ccTLDs of, eh, semi-stable countries, e.g. .so domains, are risky - should the local operator start to lose it at some point, no-one can help you, neither ICANN nor IANA)