Duahnd I believe there have been a lot of server infrastructure changes recently, so the web page may be behind.
The phone signature-checks update images, so it doesn't matter which server an image comes from: fake images from a fake update server will be rejected. If a fake server is serving real images the threat is not obvious.