Consider reporting it to the host, ISP and/or FTC next time - GDPR "compliance" doesn't let US businesses ignore the CAN SPAM act.

https://consumer.ftc.gov/articles/how-get-less-spam-your-ema...