Does anyone know why so much high-production-value spam is coming from (one or more - I’m not sure) domains ending in “fcu”? Did someone hack a major shared Credit Union server?

My main blog is the Tipsy Teetotaler, http://intellectualoid.com.