First we need to clarify that in an email header, two different kinds of senders and recipients exist, the header from/to and the envelope sender/recipient.
The first two are the ones that are shown in the Control Panel Email Live Tracking. These should not be used for Compliance Filter Rules. A Compliance Filter Rule uses the envelope sender/recipient. To find these, you can check the header of the email. These are the important header lines:
X-antispameurope-sender: john.doe@example.com
X-antispameurope-recipient: test@test.de
You can use these addresses to create your Compliance Filter Rule.
You can find more Information about the Compliance Filter in our manual.