I´m sorry but I can´t believe that you check the whois of a spam domain against your database and believe that this information is valid. It´s probably a bogus whois and the recipient of your affiliate money will be someone else.
But if that are all the investigative efforts that are unleashed when spam is brought to your attention you may as well stop altogether.