Spam: Barditch

The Usenet provider The Barditch continues to spam Usenet with advertisments for themselves. The spam is usually in small batches, mostly in the picture groups. The message body typically contains a text hashbuster, with the main text of the advertisment in a picture to hide it from filters and other automated detection. The company's owner addresses this issue somewhat here.

Below is a report of a spam run, and a couple of example pictures from the spams.




Date of report: Sat, 23 Feb 2002

10 matching articles were detected in 21 groups. 
(4 additional matching articles had already expired.)
The Breidbart Index was 20.968 for a period of 4 days.

- -----begin sample article-----
Newsgroups: alt.binaries.pictures.erotica.young,alt.binaries.pictures.erotica.ll-series,alt.binaries.sounds.mp3.1980s,alt.binaries.sounds.mp3.beatles
Subject: AOL Friendly News Server with support to get you going. 08745985238543 - 1t2djn3g.gif [1/1]
From: delilah@hotmail.com (Delilah)
Organization: She is really delightful
X-Newsreader: WinVN 0.93.11
MIME-Version: 1.0
Content-Type: multipart/mixed;
     Boundary="*-*-*- Next Section -*-*-*"
NNTP-Posting-Host: h2-214.viptx.net
Message-ID: <3c742250@news.tisd.net>
Date: 20 Feb 2002 16:25:20 -0600
X-Trace: 20 Feb 2002 16:25:20 -0600, h2-214.viptx.net
Lines: 596
X-Authenticated-User: das
Path: ...!news-out.visi.com!hermes.visi.com!nycmny1-snh1.gtei.net!cpk-news-hub1.bbnplanet.com!news.gtei.net!newsfeed1.cidera.com!Cidera!news.cfu.net!attcg1!attcg2!attsl2!attdl2!attdl1!ip.att.net!news.tisd.net!h2-214.viptx.net

--*-*-*- Next Section -*-*-*

Aol members are being censored and that is not right. You have the right
to use all aspects of the Internet, unfeddered. What Steve Case (their owner)
is doing is pounding the pulpit like an electric Baptist. Come by and see
what you are missing.

l35;l34j53l4k5j
345234l5j32l45j2345


--*-*-*- Next Section -*-*-*
Content-Type: Image/GIF
Content-Transfer-Encoding: Base64

R0lGODdhkAH0AfcAAAAAAAAAQAAAgAAA/wAgAAAgQAAggAAg/wBAAABAQABA
gABA/wBgAABgQABggABg/wCAAACAQACAgACA/wCgAACgQACggACg/wDAAADA
[...];
BmQABjAZD8zwbMfpnOVqrueKruXml+3ADvDADi3RrnUpr/NKr/Vqr/eKr/mq
r/tqloZKrgbNxpuGGhAAOw==
--*-*-*- Next Section -*-*-*--

- ------end sample article------

<3c7420fd@Orion>	alt.binaries.pictures.erotica.high-school
	alt.binaries.pictures.erotica.breasts.small
<3c742163@Orion>	alt.binaries.pictures.erotica.teen.female.oral
	alt.binaries.pictures.erotica.jap.schoolgirl
<3c742305@news.tisd.net>	alt.binaries.pictures.erotica.pw-series
	alt.binaries.pictures.erotica.jap.schoolgirl
	alt.binaries.sounds.mp3.1980s
	alt.binaries.sounds.mp3.beatles
<3c742250@news.tisd.net>	alt.binaries.pictures.erotica.young
	alt.binaries.pictures.erotica.ll-series
	alt.binaries.sounds.mp3.1980s
	alt.binaries.sounds.mp3.beatles
<3c753555@news.tisd.net>	alt.binaries.pictures.erotica.nude.runaway-girls
	alt.binaries.pictures.erotica.pigtails
<3c75358f@news.tisd.net>	alt.binaries.pictures.erotica.teens
	alt.binaries.pictures.erotica.bestiality
<3c7536c2@news.tisd.net>	alt.binaries.pictures.erotica.pw-series
	alt.binaries.pictures.erotica.teens
<3c753752@news.tisd.net>	alt.binaries.pictures.erotica.sex
	alt.binaries.pictures.erotica.mclt
<3c7535ef@news.tisd.net>	alt.binaries.pictures.erotica.russian
	alt.binaries.pictures.erotica.teen.female
<3c753684@news.tisd.net>	alt.binaries.pictures.erotica.girls
	alt.binaries.pictures.erotica.lolita
<3c77a0aa@news.tisd.net>	(expired)
<3c77a227@news.tisd.net>	(expired)
<3c779f96@news.tisd.net>	(expired)
<3c779feb@news.tisd.net>	(expired)


10 matching articles were detected in 21 groups. 
(4 additional matching articles had already expired.)
The Breidbart Index was 20.968 for a period of 4 days.

- -----begin sample article-----
Newsgroups: alt.binaries.pictures.erotica.girls,alt.binaries.pictures.erotica.lolita
Subject: Do you need a good, reliable News Server  0584305985j43lk5j35405342 - 2k4z8q3g.gif [1/1]
From: withtonoto@thecampfire.co.gr (The Loooone Arananger)
Organization: Under the blankets with Tonto.
X-Newsreader: WinVN 0.93.11
MIME-Version: 1.0
Content-Type: multipart/mixed;
     Boundary="*-*-*- Next Section -*-*-*"
NNTP-Posting-Host: vic-1-041.tisd.net
Message-ID: <3c753684@news.tisd.net>
Date: 21 Feb 2002 12:03:48 -0600
X-Trace: 21 Feb 2002 12:03:48 -0600, vic-1-041.tisd.net
Lines: 594
X-Authenticated-User: das
Path: ...!feed2.news.rcn.net!rcn!dca6-feed2.news.digex.net!intermedia!newsfeed1.cidera.com!Cidera!news.cfu.net!attcg1!attcg2!attsl2!attdl2!attdl1!ip.att.net!news.tisd.net!vic-1-041.tisd.net^M

--*-*-*- Next Section -*-*-*

;l1k245jk34h5,m34n532,m5n243
51345l2345h435kj23lhlk5jh5234
5345n234n52,4m3.5m,n25
345345n4325lk3h45lkj3h52
534523534n523n.53n.,543


--*-*-*- Next Section -*-*-*
Content-Type: Image/GIF
Content-Transfer-Encoding: Base64

R0lGODdhkAH0AfcAAAAAAAAAQAAAgAAA/wAgAAAgQAAggAAg/wBAAABAQABA
gABA/wBgAABgQABggABg/wCAAACAQACAgACA/wCgAACgQACggACg/wDAAADA
[...]
BmQABjAZD8zwbMfpnOVqrueKruXml+3ADvDADi3RrnUpr/NKr/Vqr/eKr/mq
r/tqloZKrgbNxpuGGhAAOw==
--*-*-*- Next Section -*-*-*--

- ------end sample article------

<3c7420fd@Orion>	alt.binaries.pictures.erotica.high-school
	alt.binaries.pictures.erotica.breasts.small
<3c742163@Orion>	alt.binaries.pictures.erotica.teen.female.oral
	alt.binaries.pictures.erotica.jap.schoolgirl
<3c742305@news.tisd.net>	alt.binaries.pictures.erotica.pw-series
	alt.binaries.pictures.erotica.jap.schoolgirl
	alt.binaries.sounds.mp3.1980s
	alt.binaries.sounds.mp3.beatles
<3c742250@news.tisd.net>	alt.binaries.pictures.erotica.young
	alt.binaries.pictures.erotica.ll-series
	alt.binaries.sounds.mp3.1980s
	alt.binaries.sounds.mp3.beatles
<3c753555@news.tisd.net>	alt.binaries.pictures.erotica.nude.runaway-girls
	alt.binaries.pictures.erotica.pigtails
<3c75358f@news.tisd.net>	alt.binaries.pictures.erotica.teens
	alt.binaries.pictures.erotica.bestiality
<3c7536c2@news.tisd.net>	alt.binaries.pictures.erotica.pw-series
	alt.binaries.pictures.erotica.teens
<3c753752@news.tisd.net>	alt.binaries.pictures.erotica.sex
	alt.binaries.pictures.erotica.mclt
<3c7535ef@news.tisd.net>	alt.binaries.pictures.erotica.russian
	alt.binaries.pictures.erotica.teen.female
<3c753684@news.tisd.net>	alt.binaries.pictures.erotica.girls
	alt.binaries.pictures.erotica.lolita
<3c77a0aa@news.tisd.net>	(expired)
<3c77a227@news.tisd.net>	(expired)
<3c779f96@news.tisd.net>	(expired)
<3c779feb@news.tisd.net>	(expired)

Sample images from the spam:


Take this information for what it's worth.

Back to provider list