Fake Scan Webpage 29

Hello.

I recently misstyped a URL in my browser and was re-directed to a site that attempted an attack that was blocked by Norton.

The IPS Alert says "Fake Scan Webpage 29"

I attempted to look up more details about this attack online, and failed to find technical information regarding the attack.

Is there a way I can find source code examples of attacks that trigger IPS Alert: Fake Scan Webpage 29.

The browser I was using at the time is Firefox 52.0.1

The attack was resulted from \DEVICE\HARDDISKVOLUME4\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE

I am on Windows 10.

- Thank you