Every day the same spam - How solving the problem ?

[DomainEmpire.com]

Since over 6 months now, we're getting at least once every 2 days the same spam by email (copy enclosed at the bottom).
Well, we visited several time their site and we complained in live chat with their operators who promised to remove us within 48 hours but nothing ...
Many complaints and no result: how could we stop this spam activity ? Any suggestions ? Who should we contact ?


*** ORIGINAL HATED SPAM ***
webmarket,
You have been approved.
Cash Grant Amount:
$10,000-$5,000,000
Did You Know?
-Each Year the U.S. Goverment Gives away BILLIONS in cash grants?
-There are No special requirements to obtain these grants.
-These are Free Cash Grants That you NEVER have to repay!

webmarket,You Qualify!
Click Here (Linked to: http://rd.yahoo.com/54334/*http://ww...cvn=?FOzdA@F3i$sOOR3s9dR0,sz)
Visitors are then redirected on another site ...

We could complaint with Yahoo but it seems they change address often ... Should we tolerate this spam for life ? :(

[DotComster]

Report all spamers to SpamCops - it does help all.

Use mail filters and spam killer scrips with your mail

[DomainEmpire.com]

SpamCops ? Ok, thanks, I'll try to contact them.
We're already using filters but they use fake email addresses every time different ... subjects change too so filters can do nothing :(

[mole]

http://www.spamcop.net

Return emails are useless indicators, the only reliable thing is the ip address.

Post your header and body here and we'll help you to report them.

[DomainEmpire.com]

Thanks mole, few hours to complete an important work then I'll contact them with full headers and details.

Here's the header of what we got today:

***
Return-Path: <Sharolyntmw@private.21cn.com>
Delivered-To: webmarket@2
Received: (qmail 3809 invoked by uid 8002); 30 Nov 2002 10:19:32 -0000
Received: from unknown (HELO ykqws) (216.241.187.163)
by mx6.aruba.it with SMTP; 30 Nov 2002 10:19:32 -0000
From: Trisha Zarate <Sharolyntmw@private.21cn.com>
To: <webmarket@hobbytoday.com>
Subject: Information for webmarket@hobbytoday.com
Date: Sat, 30 Nov 2002 18:57:09 -0500
Mime-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: base64
Message-Id: <ipbcnkqh@private.21cn.com>
----- Original Message -----
From: Trisha Zarate
To: webmarket@hobbytoday.com
Sent: Sunday, December 01, 2002 12:57 AM
Subject: Information for webmarket@hobbytoday.com


webmarket,
You have been approved.
Cash Grant Amount:
$10,000-$5,000,000
Did You Know?
-Each Year the U.S. Goverment Gives away BILLIONS in cash grants?
-There are No special requirements to obtain these grants.
-These are Free Cash Grants That you NEVER have to repay!

webmarket,You Qualify!
Click Here
Limited Time Offer

[mole]

Here's the SC analysis. Note, spammers sometimes use scripts to place your email address in the title or body of the email so they can track down people who complain and joe-job them. So alway remember to delete these traces when using Spamcop. Spamcop munges all reports to ISPs in the header section but can't do this when your identifying email is contained in the title or body :-

Parsing header:

Received: (qmail 3809 invoked by uid 8002); 30 Nov 2002 10:19:32 -0000
no from
no ip found in received line
Ignored

Received: from unknown (HELO ykqws) (216.241.187.163) by mx6.aruba.it with SMTP; 30 Nov 2002 10:19:32 -0000
Possible spammer: 216.241.187.163
Taking name from IP...
host 216.241.187.163 (getting name) no name
Received line partially untrusted


Tracking message source:216.241.187.163:
Routing details for 216.241.187.163
[refresh/show] Cached whois for 216.241.187.163 : abuse@webaccess.net
abuse@webaccess.net: abuse net webaccess.net = abuse@webaccess.net, postmaster@webaccess.net, spamtool@level3.net, abuse@level3.net
abuse net webaccess.net = abuse@webaccess.net, postmaster@webaccess.net, spamtool@level3.net, abuse@level3.net
Using best contacts abuse@webaccess.net postmaster@webaccess.net spamtool@level3.net abuse@level3.net
spamtool@level3.net redirects to level3@admin.spamcop.net
abuse@level3.net redirects to level3@admin.spamcop.net
Whois found abuse@webaccess.net postmaster@webaccess.net level3@admin.spamcop.net
216.241.187.163 not listed in formmail.relays.monkeys.com
216.241.187.163 not listed in opm.blitzed.org
216.241.187.163 not listed in relays.ordb.org.
Strict HTML email verification
No HTML found in HTML email. Full source is required for accurate reporting and link checking.
CLICK HERE - For more information on this error.


Please make sure this email IS spam:
From: Trisha Zarate <Sharolyntmw@private.21cn.com> (Information for webmarket@hobbytoday.com)
-Each Year the U.S. Goverment Gives away BILLIONS in cash grants?
-There are No special requirements to obtain these grants.
View full message


Report Spam to:


Re:216.241.187.163 (Administrator of network where email originates)
To: Internal spamcop handling: (level3) (Notes)
To: postmaster@webaccess.net (Notes)
To: abuse@webaccess.net (Notes)