The Spamhaus Project - Data-Miners.net

About ROKSO | Information For Spammers

Data-Miners.net - Nathan Blecharczyk

Index of Spammers

Main Info

Data Miners (aka: Nathan Underwood Blecharczyk) is one of the main sources of broken/open email relays (used by spammers), and the tools to help locate and exploit them.

In 2002 he decided to help pay his tutition by spammer hosting. He hosts their pages on dialups and uses a DNS server hosted on a DSL line or sleazy off-shore host to re-point the domain to the dialups as each one is killed by the ISP.

Aliases include 'Global Leads', with domains: ATHENA-HOSTING.COM, DATA-MINERS.NET, FLYHOST.NET, GLOBALLEADS.COM, TOTALGLOBE.NET, TRINOZY.COM, WEBCONDOS.NET, WIIIIAM.COM, ZONEHOSTS.NET

We had said: Nathan Underwood doesn't appear to really be his name. Neither does "Robert Boxfield".

No, his student record at Harvard University gives the full info.
: Query Requested : "name=Blecharczyk*"
:
: ----------------------------------------
: name: Nathan Underwood Blecharczyk
: telephone: 617-493-2106
: email: blecharc@fas.harvard.edu
: ----------------------------------------

ABUSER: Data Miners (DATA-MINERS-NET-DOM)
42-5 Solomon Road
Port-au-Prince, Port-au-Pr 0
HAITI
Robert Boxfield (RB1850-BR) support@data-miners.net
Data Miners
42-5 Solomon Road
Port-au-Prince, Port-au-Pr 00000
HT
Phone- 0
Fax-
http://www.data-miners.net
Domain Name: DATA-MINERS.NET
Record created on 1998-10-12.
Record updated on 2000-08-15.
OLD DNS SERVERS: NS1.CENTRALINFO.NET 63.102.200.2 (Free DNS provider)
NS2.CENTRALINFO.NET 63.102.204.130
Updated Date: ??-??-??
OLD DNS SERVERS: dns.vortechhosting.com 63.119.109.2
dns2.vortechhosting.com 63.119.109.3
Updated Date: 06-dec-2000
OLD DNS SERVERS: NS1.GRANITECANYON.COM 205.166.226.38 (Free DNS provider)
NS2.GRANITECANYON.COM 204.1.217.148
Updated Date: 12-dec-2000
OLD DNS SERVERS: ns.media3.net 208.249.122.250
ns2.media3.net 206.67.48.250
Updated Date: 30-dec-2000
DNS SERVERS: NS2.BIZNIZ.NET 216.142.208.110
NS.BIZNIZ.NET 64.240.51.93
Updated Date: 30-dec-2000
DNS SERVERS: NS1.ESALESPRODUCTS.COM 206.169.213.230 (Spamhaus)
NET1.PHXINTERNET.NET 209.180.143.70

AKA: Nathan Blecharczyk (PLUTONET2-DOM)
136 Maple St.
West Roxbury, MA 02131 US
Jennings, Brian (BJ5298) support@DATA-MINERS.NET
PlutoNet
44 Westfield St.
San Diego , CA 06282
616-493-5365
Blecharczyk, Nathan (NB3934) nathanb@PLUTONET.NET
PlutoNet
136 Maple St.
West Roxbury, MA 02132
617-469-8277 (FAX) 603-962-0275
http://www.plutonet.net
Domain Name: PLUTONET.NET
Record created on 12-May-1999.
Record last updated on 12-May-1999.
DNS SERVERS: NS1.FLASHCOM.COM 209.185.207.135
NS2.FLASHCOM.COM 216.32.32.182

AKA: Marketing2000+ (YOUGOTSKILLS-COM-DOM)
88 Grove Rd.
New York, NY 02392 US
Nathan Underwood (NU1-BR) nathanb@plutonet.net
Phone- 263-739-1944
Domain Name: YOUGOTSKILLS.COM
Record created on 2000-02-28.
Record updated on 2000-02-28.
Updated Date: 10-sep-2000
Domain servers in listed order:
NS1.CENTRALINFO.NET 63.102.200.2 (Free DNS provider)
NS2.CENTRALINFO.NET 63.102.204.130

========================
From: abuse/@/granitecanyon.com
Date: Fri, 8 Dec 2000 16:45:39 -0700 (MST)
Subject: Re: [4:granitecanyon] Spammer sighting at GRANITECANYON.COM !

We have redirected all http traffic directed at data-miners.net to a special
web server which redirects to an anti-spam and abuse fighting page. All email
traffic is now undeliverable to data-miners.net.
Thank you for bringing this violation of our AUP to our attention.
-Steve Senator, for the Public DNS, a service of the Granite Canyon Group
========================

Jennings, Brian (BJ5298) support@DATA-MINERS.NET
PlutoNet
44 Westfield St.
San Diego , CA 06282
616-493-5365
Record last updated on 12-May-1999.
Database last updated on 20-Oct-2000 14:14:26 EDT.

Underwood, Nathan (RB16061) support@DATA-MINERS.NET
Data Miners
136 Maple t.
West Roxbury, MA 02132
617-469-8277

Underwood, Nathan (NU130) dataminers@BIGFOOT.COM
Data Miners
136 Maple Street
West Roxbury , MA 12132
617-469-8277 (FAX) 617-469-8277

Blecharczyk, Nathan (NB3934) nathanb@PLUTONET.NET
PlutoNet
136 Maple St.
West Roxbury, MA 02132
617-469-8277 (FAX) 603-962-0275

BLECHARCZYK, PAUL
136 Maple St
West Roxbury, MA 02132 US
617-327-9025

========================
http://www.winsite.com/info/pc/win3/programr/vbasic/vbep01.zip/ReadMe..txt.html

: This collection of modules was created by Nathan Blecharczyk.
: You may use it freely as long as it is used in a non-commercial
: (freeware) program. If your program is commercial
: then please send $10 to the address below. You are
: permitted and encouraged to distribute this collection as
: long as it is not modified, not distributed for a profit,
: no claims are made on its functionality, and the proper
: credit is given to me. I make no guaranties on the
: performance of this module. Please report ALL bugs and/or
: improvement ideas/comments to b_nathan@juno.com or
: nathanb14@AOL.com.
:
: Nathan Blecharczyk
: 136 Maple Street
: West Roxbury, MA 02132
: USA

=======================
JUSTIN U BLECHARCZYK
NATHAN U BLECHARCZYK
PAUL S BLECHARCZYK
==================
http://plymouthschools.com/Science/scifair9/abstracts/physics/p19.htm
MEDIA3.NET !!!
================
http://bla.boston.k12.ma.us/honorroll/term1/grad11_1.htm
honor roll!
============
http://bla.boston.k12.ma.us/latin/Blecharczyk.htm
Track
================
Sheila Blecharczyk - Mother?
===========
nathanblec@mediaone.net / 24.128.161.64
==============
On 30/Jan/01 the A & MX records for "yougotskills.com" pointed to:

dsl254-118-106-nyc1.dsl-isp.net [216.254.118.106]

On 8/Aug/01 the A & MX records for "yougotskills.com" pointed to:

dsl254-118-106.nyc1.dsl.speakeasy.net [216.254.118.106]

He's running NT on the link and it calls itself: nathan400nt on a network named Plutonet. Running a fake "free email" website on his DSL link. It is also the IP # used to email out his spamtool catalog: <http://groups.google.com/groups?rnum=1&selm=FeIW5.113206%24U46.3638923%40news1.sttls1.wa.home.com>
==============
b_nathan@juno.com
nathanblec@fnmail.com
===============
Blecharczyk, Nathan
136 Maple St,
Dorchester, MA 02121-2807
(617)469-8277
===================
* Blecharczyk, Paul
136 Maple Street,
Boston, MA 02132-1845
=================
Blecharczyk, Sheila
136 Maple St,
Dorchester, MA 02121-2807
(617)327-9025 (617)469-8277
==================
Paul Blecharczyk
377 Smith Neck Rd
South Dartmouth , MA
(508)996-4483
=====================
This just in:

Received: from mailhost.neaccess.net [204.255.214.236]
by elided; Thu, 19 Oct 2000 20:51:40 -0500
Received: from nathan450nt (cbrg0542.capecod.net [63.211.186.34]) by mailhost.neaccess.net
(8.9.3/8.9.3/Debian/GNU) with SMTP id elided; Thu, 19 Oct 2000 21:50:39 -0400
Date: Thu, 19 Oct 2000 21:50:39 -0400
From: dataminers@mailroom.com
Message-Id: <elided@mailhost.neaccess.net>
To: elided
Subject: Data Miners Site Down - Alternate Contact Methods
Reply-To: dataminers@mailroom.com
X-SLUIDL: elided

Dear Data Miners Customers,

The anti-spammers have once again been able to shut down our web site. We are working on a long-term
solution for keeping the
site up, but the truth is that the site will remain down for several days. This also means that we cannot
receive e-mail via any of our
data-miners.net addresses.
However customers can still place orders by sending an e-mail to DataMiners@mailroom.com or a fax to
(253) 669-9444. Please
include all required information. If you have any questions or need information that is normally posted on our
web site, then simply contact us through the above means, and we will provide you with the requested
information.
On the bright side we now have a large supply of fresh anonymous relays in stock. The pricing on these are
$20 per foreign
anonymous relay, $13 per unknown origin (US or foreign) anonymous relay, and $10 per US anonymous
relay. Although we have a
large stock right now, we cannot guarantee how long we will have anonymous relays in stock-stock up now!

Sorry for the inconveniences,
DM Staff

==========================
From: http://www.deja.com/getdoc.xp?AN=683648741
-----Original Message-----
Received: from home.gis.net [208.218.130.20]
by spammed.victim.com; Sun, 10 Dec 2000 18:24:17 -0600
Received: from 450a (ppp33-166.gis.net [216.41.33.166]) by home.gis.net
(8.8.8/8.9.3) with SMTP id TAA27133 for <spammed.victim.com>; Sun, 10 Dec
2000 19:21:54 -0500 (EST)
Date: Sun, 10 Dec 2000 19:21:54 -0500 (EST)
From: support@data-miners.net
Message-Id: <200012110021.TAA27133@home.gis.net>
To: spammed.victim.com
Subject: Data Miners Contact Information
Reply-To: support@data-miners.net

This message is being sent to you by Data Miners (www.data-miners.net -
currently offline). Refer to the bottom of this message for removal
instructions.
----------------------

Dear Customers,

Our web site and e-mail systems have been offline since Tuesday, December
5th due to the efforts of anti-spammers. Any e-mail sent to us during that
period was not received by us! We do not know when our web site and e-mail
systems will be back online, but we are still conducting business. Please
use the below means to contact us with requests for information, orders,
etc.

Voice Mail: 507-299-2596
Fax1: 507-299-2596
Fax2: 253-669-9444

Please include your e-mail address when faxing or leaving a voice message!

Thank you,
Data Miners Staff

PS: DO NOT REPLY TO THIS MESSAGE - THE MESSAGE WILL BE RETURNED AS
UNDELIVERABLE!!!

----------------------
You were sent this message because you have DIRECTLY shown an interest in
Data Miners products or services. However if you do not wish to receive
future messages from us simply then fax your e-mail address and 'REMOVE' to
one of the numbers above. If you simply do not want mail being sent to this
e-mail account then send the remove request but remember to supply us with a
new e-mail address to which we can continue to send you e-mail.

==========================
From: http://www.deja.com/getdoc.xp?AN=700863608

-----Original Message-----
Received: by spammed.spammed.com from localhost
(router,SLMail V4.1); Sun, 03 Dec 2000 20:28:07 -0600
for <spammed>
Received: from default [216.254.118.106]
by spammed.spammed.com [spammed] (SLmail 4.1.3395) with ESMTP
id D21E75CF9EC6473D90F9ABC0E96E80FC
for <spammed@spammed.com>; Sun, 03 Dec 2000 20:28:06 -0600 Received: from 450a [216.41.73.135] by
default
(SMTPD32-5.05) id A0A35EF01E6; Sun, 03 Dec 2000 21:25:39 -0500 To: "spammed"
<spammed@spammed.com>
From: support@data-miners.net
Subject: Data Miners Newsletter - SMTPs/Bulk ISP/etc.
Reply-To: support@data-miners.net
Message-Id: <200012032125133.SM02256@450a>
Date: Sun, 3 Dec 2000 21:25:52 -0500
X-SLUIDL: 33C191FA-5FEE4311-8D090FB0-C3B50E56

This message is being sent to you by Data Miners (www.data-miners.net). Refer to the bottom of this
message for removal instructions.
----------------------

CONTENTS:
* Various SMTP News
* Bulk Friendly ISP Accounts
* AOL E-Address List
* Mailing Opportunity: Mortgage Leads (D-Media)

----------------------
Various SMTP News
fig
Data Miners have reduced prices on all unknown origin SMTPs. We also recently restocked our SMTP
selection and are increasing our supply every week. All SMTP orders will now automatically be filtered and
compensated for same-subnet IP addresses. For example, if you order two SMTPs, and by chance you are to
receive two IP addresses from the same class c subnet (such as 209.45.23.56 and 209.45.23.102), then we
will automatically give you a third, fourth, or however many IPs it takes until you have 2 IP addresses from
different subnets.
http://www.data-miners.net/smtps.htm

----------------------
Bulk Friendly ISP Accounts
fig
Data Miners has now been providing bulk friendly ISP accounts for a month-without any downtime! We have
updated the terms slightly however so that you receive at least five ISP accounts per day that are to be used
solely by you. Therefore if you don't use your daily allotment one day, you can be sure that they will still work
the next day. However each dial-up account will only accept one connection/computer at any given time.
http://www.data-miners.net/bulkISP.htm

----------------------
AOL E-Address List

As a reminder, Data Miners is selling one of the largest and cleanest AOL lists available. This list contains 7.5
million addresses and is approximately 85% deliverable. The list is selling for $999.
http://www.data-miners.net/addresses/index.htm

----------------------
Mailing Opportunity: Mortgage Leads (D-Media)

D-Media is looking for E-Mail Marketers to produce Mortgage Leads (and other types of leads). We want to
buy or trade mortgage leads, new and old. Don't have hosting??? We would be willing to host pages for your
mailouts. For more information:
ph: (807)577-2632 or email: sengine55@yahoo.com

----------------------
You were sent this message because you have DIRECTLY shown an interest in Data Miners products or
services. However if you do not wish to receive future messages from us simply reply to this message with
REMOVE in the body of the message. If you simply do not want mail being sent to this e-mail account then
send the remove request but remember to supply us with a new e-mail address to which we can continue to
send you e-mail.

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in submissions to the database, and will correct any errors, but accepts no responsibility or liability for any errors, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The information on this site is for information purposes only and is not intended as legal advice of any kind.

The URL to this record is: http://www.spamhaus.org/rokso/search.lasso?evidencefile=1145