The IP address 12.111.190.67 appears to belong to a bank hosting outfit called Corillian out of Hillsboro, OR. Here's what I turned up in a whois:

http://ws.arin.net/whois/?queryinput...12-111-190-0-1

They seem legit, but who knows? The "Corillean" domain's been registered with them since '01 looks like. Maybe they've been "taken" too. Here's more contact info on them:

http://corillian.com/corporate/contact.aspx

edit -- From what I can gather on doing some whois footwork, Elevations Credit Union hosts their own online banking (there's an ip range that's registered to them and sure enough, their site's found in that range), yet here's a subdomain showing up hosted by Corillian. Is there ANY way to do a whois on subdomains?