header:
01: Received: from occasionally.elarmssugesst.com ([151.1.129.190]) by
02: mx-ha.gmx.net (mxgmx015 [212.227.15.9]) with ESMTP (Nemesis) id
03: x for <x>; Wed, 24 Feb 2021
04: xx:xx:xx +0100
Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
whois:http://217.25.88.233
/?*schnapp*
whois:217.25.88.233 [X] ja / [ ] nein
whois:https://lipmentos.com
/?a=1588
&oc=11798
&c=34150
&m=3
&s1=
&s2=*schnapp*
&s3=*schnapp*
whois:35.204.93.160 [X] ja / [ ] nein
whois:https://whiteseem.com
/?a=1588
&oc=11798
&c=34150
&m=3
&s1=
&s2=*schnapp*
&s3=*schnapp*
&ckmguid=*schnapp*
whois:35.204.218.225 [X] ja / [ ] nein
whois:https://tracking.trkkadsm.com
/aff_c?offer_id=303
&aff_id=1010
&aff_sub=1588
&aff_sub2=*schnapp*
whois:99.80.191.246
whois:34.250.4.239
whois:52.215.106.33
[X] ja / [ ] nein
whois:https://campaign.golead.de
/dere,food,voucher,com_130.html?idPartner=43
&idCampaignAd=0
&subId=1010-1588
&subIdentifier=*schnapp*
whois:168.119.31.202 [X] ja / [ ] nein
whois:https://www3.einfacheronlineeinkaufen.com
/campaign_453.html?coyoteAffiliTokenId=*schnapp*
&
whois:168.119.31.202 [ ] ja / [X] nein

Am Schluss haben wir es mit PELEMA PTE. LTD. zu tun.
Alles ab whois:tracking.trkkadsm.com ist der Rotz von J* D* (addservice media GmbH, Performance Lead GmbH, Blue Face Media GmbH, Hyperservice GmbH, Adtargeting GmbH).

Code:
canonical name 	addservicemedia-elb.go2cloud.org.
aliases 	tracking.trkkadsm.com
addresses 	3.218.189.57
34.207.12.28
3.222.229.202