Web Attacks on Outgoing connections?

I just got 2 Vulnerability Blocked messages on my Norton Internet Security (Comcast version) which said  "Web Attack: Exploit Toolkit Website 67" and "Web Attack: Mass Iframe Injection Website 17".  The strange thing is, they were both listed as Outgoing connections.  What does this mean?

Note:  The Vulnerability messages appeared when I was redirected from a page I was viewing to some other page which didn't load because of Norton's block.  I don't know if this matters, though.