header:
01: Received: from unusoctoduo.sys.mailvalue.net ([91.192.40.182]) by
02: mx-ha.gmx.net (mxgmx001 [212.227.15.10]) with ESMTP (Nemesis) id
03: x for <x>; Wed, 06 May 2020 xx:xx:xx
04: +0200
05: [...]
06: Received: from app65.muc.ec-messenger.com (app65.muc.ec-messenger.com
07: [172.16.9.45])
08: (envelope-from <x [at] bounce.news.luckyoffers-ec.de>)
09: by hp13mtaq113 (mtaq-receiver/2.20200220.0) with ESMTP ID: [ID filtered]
10: for <x>; Wed, 06 May 2020 xx:xx:xx +0200
Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
whois:http://news.luckyoffers-ec.de
/re?l=*schnapp*
&s=*schnapp*
whois:91.192.43.152
whois:91.192.43.153
whois:91.192.43.154
whois:91.192.43.151
[X] ja / [ ] nein
whois:https://ultratrackings.com
/?a=100028
&c=*schnapp*
&s1=lucky-ec
whois:3.208.105.151
whois:54.236.164.154
whois:52.7.49.177
[X] ja / [ ] nein
whois:https://cyberravioli.com
/?a=100028
&c=*schnapp*
&s1=lucky-ec
&ckmguid=*schnapp*
whois:52.7.49.177
whois:3.208.105.151
whois:54.236.164.154
[X] ja / [ ] nein
whois:https://www.provoziermich.com
/landing2?cat=milf
&sub=na
&pi=100028
&pt1=*schnapp*
whois:35.198.117.80 [ ] ja / [X] nein

Code:
Bitmaster Online B.V.
Plotterweg 31
3821BB Amersfoort
CC: 71012575
VAT: NL858546073B01