phishing attempt: hey bank, don't help, OK?

I received a phishing email at work from my bank (TD) which used a url-redirector at THE REAL BANK'S WEBSITE to get to the fake site.

That is: www.tdcanadatrust·com/servlet/infosite.servlet.OutBoundServlet?RequestedPage=phishing·url/urgent_verifying/update.inf

Thunderbird didn't think it was phishing. The destination URL originally went to a copy of the bank's site; two hours later, it was deactivated by the host, and Firefox warns it is a phishing attempt.

The bank hasn't deactivated the redirector. I'm curious how long it will stay active. They should be pretty embarrassed; this isn't rocket-science, and there's no reason you should be able to pull crap like this.

in lieu of a real post:

Why didn't anyone tell me these existed?

Holy moley that looks like fun. Cheaper than parachuting, also.

Seen via brad.

[ETA: the nearest one to here seems to be somewhere unspecified in Michigan, then one in NH. I don't think I'll make a multi-day trip out of it, but if I already happen to be visiting near one of these...]