Phoenix exploit kit with fallback to fake scanner page. Same strategy as already seen at Eleonore kit. New trend ?