i have forwarded it to this HSBC address in order to see if it is a bona fide address or not:

phishing@hsbc.com


it looks like it might be 'all right' but having seen bogus HSBC sites 'outed' on the web...well, you never can be too sure - can you?