Los Angeles Federal Credit Union email:e-branch@lafcu.org

Email Header Analysis

IP Address: (
IP Address Country:  Germany
IP Continent:  Europe
IP Address City Location:  Höst
IP Address Region:  Nordrhein-Westfalen
IP Address Latitude:  51.65,
IP Address Longtitude:  6.1833
Organization:  Hosteurope GmbH

From: Los Angeles Federal Credit Union email:e-branch@lafcu.org
to: scamfraudalert@gmail.com
date: Tue, Jul 4, 2006 at 7:27 AM
subject: Your e-Branch PIN has expired.

Dear Member,

Your e-Branch PIN has expired. For security reasons your e-Branch PIN needs to get updated. A fundamental element of safeguarding your confidential information is to provide protection against unauthorized access or use of this information. We maintain physical, electronic and procedural safeguards that comply with federal guidelines to guard your nonpublic personal information against unauthorized access.

At this time we need you to follow the necessary steps needed to update your e-Branch PIN.

ht  t  ps: www.lafcu

You are responsible for your e-Branch PIN and agree to keep it confidential at all times. Do not disclose your e-Branch PIN to anyone unauthorized to sign on your account.

Your Internet Banking e-Branch PIN ensures that only you can access your confidential information.

Los Angeles Federal Credit Union Online Department.

Money Mule Solicitation – Vulnerable Credit Unions

Money Mule solicitation: credit unions identified as vulnerable for computer hacking for laundering  money i.e. wire transfer to cyber-criminals.scamalert

It is very important for us to receive payment from one of  the accounts listed below:

  1. Websterbank https://www.websteronline.com
  2. 310 Community Credit Union https://www.310ccu.org
  3. Member One Federal Credit Union Https://www.epscu.com
  4. Dps Credit Union http://www.dpscu.com/
  5. Air Academy Federal Credit Union https://www.aafcu.com/
  6. Insight financial Credit Union http://www.insightfinancialcu.com/
  7. Maco Educators Federal Credit Union http://www.maco.org
  8. Norlarco Credit Union http://www.norlarco.com/index.asp
  9. Faa Credit Union http://www.faaecu.org/
  10. Silver State Schools Credit Union http://www.silverstatecu.com/
  11. Great Lakes Credit Union https://www.glcu.org
  12. Sacramento Credit Union http://www.sactocu.org/
  13. TopLine Federal Credit Union https://www.toplinecu.com/
  14. Credit Union of Texas http://www.cuoftexas.org/
  15. St. Cloud Federal Credit Union http://www.stcloudfcu.org/
  16. University of Utah Credit Union https://www.uofucu.com/
  17. Hudson Valley Federal Credit Union http://www.hvfcu.org/
  18. OCT Federal Credit Union http://www.octfcu.org/
  19. Keys Federal Credit Union http://www.keysfcu.com/
  20. Bank Fund Staff Federal Credit Union https://bfsfcu.org
  21. Deer Valey Credit Union http://www.dvcu.org/index.html
  22. IBM Southeast EFCU https://www.ibmsecu.org/
  23. Bellwether Community Credit Union https://www.tcu.org
  24. University of Hawaii Federal Credit Union http://www.uhfcu.com/
  25. Arkansas Best Federal Credit Union http://www.abfcu.org/
  26. Philadelphia Federal Credit Union http://www.pfcu.com/
  27. State Employees Credit Union https://www.secu.org
  28. First light Federal Credit Union https://www.firstlightfcu.org
  29. Los Angeles Firemen’s Credit Union https://www.lafirecu.org/
  30. Cyprus Credit Union https://www.cypruscu.com/
  31. My Credit Union http://www.mycuonline.org/
  32. Aggieland Credit Union http://www.aggielandcu.org/
  33. Tech Credit Union http://www.techcu.com/
  34. TruChoice Credit Union https://cuonline.msfcu.com
  35. Central Virginia Federal Credit Union https://www.cvfcu.com/
  36. Georgia Federal Credit Union https://www.gfcu4u.org
  37. Warren Federal Credit Union https://www.warrenfcu.com
  38. Lake Michigan Credit Union www.lmcu.org
  39. First Tech Credit Union https://www.firsttechcu.com
  40. Coast Central Credit Union https://www.coastccu.org
  41. America First Federal Credit Union https://www.americafirst.com
  42. Teachers Federal Credit Union http://www.teachersfcu.org
  43. Midwest Community Federal Credit Union https://home.eofcu.org
  44. T&C Federal Credit Union https://www.tcfcu.org
  45. New England Federal Credit Union https://www.nefcu.com
  46. Glass City Federal credit union
  47. https://browserbanking.glasscityfcu.com/

Please, inform us if you already have an account in one of these banks.
It will be convenient for our cooperation. It is necessary to transfer the large sum of money (about 6,000 USD) and buyer wishes to transfer money in this way, because it is the most suitable for him. If you have any branches of this bank in your city, and you agree to help us with reception of money,discover the possibility to open an account (we incur all charges) in this bank.

All service should pass according to instructions which we are going to
send to you. If you open the new checking account (not saving) We will cover all expenses for an account opening when you’ll receive your first transfer. Your net profit from all financial transactions will be equaled 7%.

Basically a check is used. It is sending to your bank address for realization of financial transactions. You’ll get the check during 5- 10 days. Then there is a process of check clearance, which is 3-10 days.

This method for deals is very long and inconvenient, that is why our clients started to use the other method, which is to transfer money to your credit card number. Our client comes to a bank and asks his bank service to transfer money to his credit card number. It lasts 2-3 days and after it you can take money right away, it means that money is available right away.

This method is very convenient for three parties, for you, for us and for a client. We need to know your credit card number for this money deal. So if you have a credit card, please send to us, its number. If you do not have a credit card, please go to a bank as soon as possible and find out how to get it and
how long it will take to get a credit card and then inform us.

Denise Duvall
IRG Manager

WhoIs dandycash.com

scamFRAUDalert see it necessary to issue this ALERT since the firm appear toscamalert be associated with an Indian tribal group that goes by the name LTS Tribal Funding. The WHOIS information below show private registration. This is a warning sign.

Consumers have also been complaining that they are receiving calls offering them the opportunity for continuing education and other unwanted solicitations – 657-992-9618

LTS Funding Inc d/b/a Dandy Cash http://www.dannycash.com
2207 Concord Pike #55,
Wilmington, Delaware

Address lookup
canonical name dandycash.com
Domain Whois record

Queried whois.internic.net with “dom dandycash.com”…

Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 27-nov-2012
Creation Date: 29-nov-2011
Expiration Date: 29-nov-2013

Last update of whois database: Thu, 13 Dec 2012 14:38:23 UTC

Queried whois.godaddy.com with “dandycash.com”…

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Created on: 29-Nov-11
Expires on: 29-Nov-13
Last Updated on: 27-Nov-12

Domains By Proxy, LLC
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States

Administrative Contact:
Private, Registration DANDYCASH.COM@domainsbyproxy.com
Domains By Proxy, LLC
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Technical Contact:
Private, Registration DANDYCASH.COM@domainsbyproxy.com
Domains By Proxy, LLC
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Domain servers in listed order:

Network Whois record

Queried whois.arin.net with “n″…

NetRange: –
OriginAS: AS10316
NetName: CODERO2006A
NetHandle: NET-69-64-64-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
RegDate: 2006-08-04
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-69-64-64-0-1

OrgName: Codero
Address: 8735 Rosehill Rd, Ste 400
City: Lenexa
StateProv: KS
PostalCode: 66215
Country: US
RegDate: 2009-07-21
Updated: 2011-11-21
Ref: http://whois.arin.net/rest/org/APHIN

OrgTechHandle: ADA108-ARIN
OrgTechName: APH DNS Administrator
OrgTechPhone: +1-866-226-3376
OrgTechEmail: dns@codero.com
OrgTechRef: http://whois.arin.net/rest/poc/ADA108-ARIN

OrgAbuseHandle: APHAB-ARIN
OrgAbuseName: APH Abuse
OrgAbusePhone: +1-866-226-3376
OrgAbuseEmail: abuse@codero.com
OrgAbuseRef: http://whois.arin.net/rest/poc/APHAB-ARIN

DNS records
name class type data time to live
dandycash.com IN A 3600s (01:00:00)
dandycash.com IN MX
preference: 1
exchange: aspmx.l.google.com
3600s (01:00:00)
dandycash.com IN MX
preference: 5
exchange: alt1.aspmx.l.google.com
3600s (01:00:00)
dandycash.com IN MX
preference: 5
exchange: alt2.aspmx.l.google.com
3600s (01:00:00)
dandycash.com IN MX
preference: 10
exchange: aspmx2.googlemail.com
3600s (01:00:00)
dandycash.com IN MX
preference: 10
exchange: aspmx3.googlemail.com
3600s (01:00:00)
dandycash.com IN NS ns73.domaincontrol.com 3600s (01:00:00)
dandycash.com IN NS ns74.domaincontrol.com 3600s (01:00:00)
dandycash.com IN TXT google-site-verification=zPWNcsu3iXv4k-a5q3ud96AMqW8qpnmV45QHzWdiiZY 3600s (01:00:00)
dandycash.com IN SOA
server: ns73.domaincontrol.com
email: dns@jomax.net
serial: 2012080601
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00) IN PTR 69-64-78-198.dedicated.codero.net 43200s (12:00:00)
78.64.69.in-addr.arpa IN SOA
server: ns1.codero.com
email: hostmaster@codero.com
serial: 2009072902
refresh: 7200
retry: 1800
expire: 604800
minimum ttl: 43200
43200s (12:00:00)
78.64.69.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-12-23 13:02:39Z
signature inception: 2012-12-13 13:02:39Z
key tag: 1715
signer’s name: 69.in-addr.arpa
(1024 bits)
10800s (03:00:00)
78.64.69.in-addr.arpa IN NSEC
next domain name: 79.64.69.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
78.64.69.in-addr.arpa IN NS ns2.codero.com 43200s (12:00:00)
78.64.69.in-addr.arpa IN NS ns1.codero.com 43200s (12:00:00)

— end —

Integrated Securities Group, Inc.

scamFRAUDalert see it necessary to issue this ALERT as money mule scammers scamalertare now impersonating Integrated Security Group of  Meriden, Connecticut by contacting the general public via mail informing them of  Mega Lottery Winnings  in the US and UK for $150,000.00 for shopping at Walmart or Home Depot.

The scammers then enclosed a check for $3,890.00 asking the recipient to cash said check and  wire back a portion of $1,995.00.

WhoIs USAJobmark.com

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT.

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer these funds either by WESTERN UNION, MONEYGRAM, into your bank, a DOMESTIC BANK or FOREIGN BANK ACCOUNT

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Protecting Yourself Against Money Mule
  4. Washingtonpost.com by Brian Kerbs
  5. Interview With A Money Mule
  6. Bobbear.co.UK ~ Historical Money Mule Sites

We are an international mailing company we are purchasing and delivering brand famous items from the U.S. to Europe.
This is what we are doing.
This is mainly, mobile phones, computers, musical instruments appliances etc.

For the work purpose, we need a manager who lives in U.S., who will receive parcels and forward them following the internal company instructions to the recipient (client).
The company is paying for all followed up job expenses, VAT taxes and mailing fees as well.

The staff you will receive is already prepaid so your part of our routine will be receiving and sending activity, and you will get a stable and in-time salary for it. You will receive a W2 free form by the end of the year.

Your salary level will start from 3000 USD per month. But in 2 month it could be increased up to 4000, this is all depends on your personal skills and motivation.

We are looking forward to cooperate and to find new members for our team.

1. Receiving the parcels.
2. Printing out prepaid labels and company instructions.
3. Unpacking, repacking, with the use of labels and instructions.
4. Sending a parcel to a recipient mentioned in the label.

Each box has the Name, Tracking Number and the content. You will receive pre-paid USPS shipping labels via email.
You will need to print and attach them to the boxes with the adhesive tape.
You won t have to pay for the shipping. All labels are prepaid.
Then you will need to carry boxes to your local USPS office and they will take care of the packages from then.


1. Trusted and responsible.
2. Should have computer, mobile phone and Internet connection.
3. Should always be in touch with a personal manager via phone and email.
4. Should be accurate with the time frames and limits.

If you are interested in this proposal, we suggest that you should go through a trial period. For this purpose we will need quite some of your personal information. As following:

1. Your full name
2. Your Age
3. Contact phone number in international format
4. Contact email address:

Let us know if you are interested in the position listed above and we will send you more details regarding this vacancy along with our corporate agreement and application form.

This is Jeffery@usajobmark.com/Jon@usajobmark.com. our corporate email address, (the names change but the usajobmark.com never does)

Best regards

Thank you for choosing us

Other Domains Associated With This Scam:

  1. bestjobmark.com
  2. usjobmark.com
  3. usajobmark.com

Address lookup
lookup failed usajobmark.com

Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom usajobmark.com”…

Registrar: REGTIME LTD.
Whois Server: whois.webnames.ru
Referral URL: http://www.webnames.ru


Status: ok
Updated Date: 31-may-2012
Creation Date: 31-may-2012
Expiration Date: 31-may-2013

Last update of whois database: Thu, 13 Dec 2012 09:13:56 UTC
Queried whois.webnames.ru with “usajobmark.com

Regtime Ltd. WHOIS server
Domain name: usajobmark.com

Name servers:

Registrar: Regtime Ltd.
Creation date: 2012-05-31
Expiration date: 2013-05-31

Fernando Zelmer
Email: fernanozelmer@yahoo.fr
Organization: Fernando Zelmer
Address: 33 rue CharlesIII
City: Leon
State: Leon
ZIP: 54001
Country: FR
Phone: +33.554696790

Administrative Contact:
Fernando Zelmer
Email: fernanozelmer@yahoo.fr
Organization: Fernando Zelmer
Address: 33 rue CharlesIII
City: Leon
State: Leon
ZIP: 54001
Country: FR
Phone: +33.554696790

Technical Contact:
Fernando Zelmer
Email: fernanozelmer@yahoo.fr
Organization: Fernando Zelmer
Address: 33 rue CharlesIII
City: Leon
State: Leon
ZIP: 54001
Country: FR
Phone: +33.554696790

Billing Contact:
Fernando Zelmer
Email: fernanozelmer@yahoo.fr
Organization: Fernando Zelmer
Address: 33 rue CharlesIII
City: Leon
State: Leon
ZIP: 54001
Country: FR
Phone: +33.554696790

Network Whois record

Don’t have an IP address for which to get a record
DNS records
name class type data time to live
usajobmark.com IN SOA
server: ns1.nameself.com
email: support@regtime.net
serial: 1353924667
refresh: 10800
retry: 900
expire: 604800
minimum ttl: 86400
43200s (12:00:00)
usajobmark.com IN NS ns1.nameself.com 43200s (12:00:00)
usajobmark.com IN NS ns2.nameself.com 43200s (12:00:00)
usajobmark.com IN MX
preference: 10
exchange: mx.yandex.ru
43200s (12:00:00)

— end —