The photo uploads use ftp transfer, which, from a privacy perspective, is not secure like encrypted https.
Phishing attempts typically use similar urls with spelling differences. So, to my eyes, ChrisF's details of the warning "url:phishing", together with Martin owning both of the domains, shows the Norton ad-blocker hasn't been told.
It's a false alarm.