i would also contact Bank of America fraud dept. and tell them about the domain where the site is housed. You missed a very important issue when you contacted the FBI. This is phishing and related to identity theft which is a much bigger deal than just spamming. Although the FBI probably wont do much, i suspect that Bank of America will have a much easier time getting the site shut down from the hosting ISP...
