The domains involved include: - emailappenders.com - emailappenders.net - emailsuper.com - maila1.com - maile1.com - maili0.com - maili9.com - mailil.com - mails1.net - mailsuper1.com - salesbrowser.com - salesbrowser.net - salescola.com - sixchannels.com - sloanmail.com - stech.com - surveyregister.com - supremelists.com - tracks1.com - unwindzone.com - waves1.com - webshow1.com and probably many others that have turned up occasionally.

We can't say they're all owed or organized by the same group, but have received enough spam to correlate addresses, servers, phone numbers, email addresses, and spamming style to link them all together. Several of these domains have been listed under the name "Steve Radler" or "Sloan Markeing".

The spams are all characterized by URLs that contain the recipient's personal information, including name, company, address, phone & fax, and zipcode. Obviously this is used for tracking. The emails use lots of quoted printable characters, =20 for space, =2E for ., =3D for =, =3E for ?. They also contain many continuation lines, using = at the end of the line to indicate the next line is part of the current line. We have never seen so much of this in emails from any other senders. It seems to be a trademark of this group.

We've been receiving and posting spam from them for several years. Suddenly in a very short time span we received 6 removal requests mostly from the same IP address in India. Each request had lame excuses. They even claimed that the emails were due to a virus in a client's computer which had now been cleaned up. Yet still, the spam continues arriving. Just today they begain spamming another one of our email addresses. They are obviously emailing to non-confirmed lists.

Most of the websites merely show a "removal" form or a "login" form. Very few of them show any sort of contact information or even any information about the company. This certainly helps make them look illegitimate. We suppose that most of the domain names exist in order to get past filtering and blocking. Legitimate senders rarely need to resort to this tactic. Many of the domains are registered to registrar99@hotmail.com or irishdomains@hotmail.com. A few were registered to alans@sloanmarketing.com

What we find odd is that we can find very little trace of these folks in either NANAE or SpamHaus. That is very puzzling. We reject the idea that we have our own pet group of spammers harassing just us. Some of our addresses that receive their spew have no obvious relationship to the others. Maybe they just keep their volume low enough to stay under the radars of other spam trackers.

So, Steve or Alan or whoever you are ... your removal requests would probably amount to something if you didn't continue spamming email addresses that have never signed up for your emails.

Here are some of the removal request excuses for your reading amusement:

Date : 2005-03-29 15:36:27 IP address : 203.187.255.99 Hostname : 99-255-187-203.cable-client.iqara.net area: deny description: sourcelists.com 550 20030410 another NON-optin jerque ayapsai36@hotmail.com sales@sourcelists.com reason: obsolete name: Steve Thomas company: Sourcelists.com location: San Francisco phone: 800-884-2587 email: SteveT@Sourcelists.com info: Please remove this entry as we dont spam and more over, sales@sourcelists.com is only used as an incoming mail id. authorization: yes

Date : 2005-04-13 06:17:07 IP address : 203.187.255.98 Hostname : 98-255-187-203.cable-client.iqara.net area: spam reason: obsolete name: webadmin company: emailappenders.net phone: 800-886-1838 email: webadmin@emailappenders.com authorization: yes

Date : 2005-04-13 06:18:49 IP address : 203.187.255.98 Hostname : 98-255-187-203.cable-client.iqara.net name: webadmin company: supremelists.com phone: 888-820-2186 email: webmaster@supremelists.com authorization: yes

Date : 2005-04-13 06:18:54 IP address : 203.187.255.98 Hostname : 98-255-187-203.cable-client.iqara.net area: spam name: webadmin company: supremelists.com phone: 888-820-2186 email: webmaster@supremelists.com authorization: yes

Date : 2005-04-13 06:22:29 IP address : 203.187.255.99 Hostname : 99-255-187-203.cable-client.iqara.net area: spam name: webadmin company: uluniversity phone: 888-503-5536 email: support@uluniversity.com authorization: yes

Date : 2005-04-15 12:50:57 IP address : 61.95.199.82 Hostname : dsl-kk-082.199.95.61.touchtelindia.net area: spam description: Spammers' phone numbers SalesBrowser reason: incorrect correction: It is not a Spammer. It is due to virus.It has been cleared now. name: Madhu company: salesBrowser location: 14781 memorial drive suite 1155 houstan tx 77079 email: support@salesbrowser.com authorization: yes

TOASTEDspam.com toasted spam dot com