Phish Alert
 
 Full Report: /ANZ_Bank_Bank_of_America_HSBC_St_George_Bank_phish901843.html
 
 Consumed following related reports:

[901486] http://www.heavenlyvisitation.com/sec/www.hsbc.co.uk/hsbc/1.php?jsessionid=CAM10:jsessionid=0000RcSVT4vYF7HNB8AsppR8HRo:11j71fovq?IDV_URL=hsbc.MyHSBC_pib
The URL accesses a Bank of America phishing site, active at the time of investigation.
A page fetch was successful.
There is another BofA phish at
http://www.heavenlyvisitation.com/sec/BankofAmerica.Com1/bankofamerica/signon.php?section=signinpage&update=&cookiecheck=yes&destination=nba/signin
There is an HSBC phish at
http://www.heavenlyvisitation.com/sec/www.hsbc.co.uk/hsbc/1.php?jsessionid=CAM10:jsessionid=0000RcSVT4vYF7HNB8AsppR8HRo:11j71fovq?IDV_URL=hsbc.MyHSBC_pib
There is a Verified by Visa phish at
http://www.heavenlyvisitation.com/sec/usa.visa.com/usa.visa.com/
There are St.George Bank phish at
http://www.heavenlyvisitation.com/sec/Stgeorge.Com.Au/stgeorge/logon.php?safeAndSecurepage=Y&bhcp=1
http://www.heavenlyvisitation.com/sec/Stgeorge.Com/logon.php?safeAndSecurepage=Y&bhcp=1
http://www.heavenlyvisitation.com/sec/www.stgeorge.com/logon.php?safeAndSecurepage=Y&bhcp=1Changed status to confirmed phish.IP Converted: 64.6.241.11

dword = 1074196747
hex1 = 0x4006f10b
hex2 = 0x40.0x6.0xf1.0xb
oct = 0100.06.0361.013
View CIDR AS15055 Report: http://www.cidr-report.org/cgi-bin/as-report?as=15055

"15055 | US | arin | 2007-07-05 | YOURCOLO-AS-1 - FastPC Inc."<br />
Extended information for AS15055:
State/Province: ny
Country: us
Responsible Domain: worldnet.att.net
Abuse Email: security@worldnet.att.net
ANZ phish at
http://www.heavenlyvisitation.com/swi/_vti_cnf/anz.com/anz.com/ANZ/Bankmain.htmGenerated and sent email phish alert to respective parties.