Thank you for this hint!
I’ve now disabled the “captive portal check” via custom script in AFWall+. I used the instructions from here: https://www.kuketz-blog.de/android-captive-portal-check-aenderung/ (German).
No connection to 1e1000.net anymore 
.