[OSINT] Elon Musk vs OSINT
This article is made for educational purpose only, I don’t endorse anything you could do with these informations, such as scamming or stalking. Everything comes from open and legal sources.
The goal
E. Musk is an interesting profile, he’s very active on the internet and has been working on a couple of companies.
What can we extract from all those open sources ?
That’s what we’ll see !
The first recon
Elon Musk is a known avid user of the Internet, but how do we start ?
Well, emails are always a strong source of intels, and as Musk companies are present all over the internet, we can extract some unexpected data:
Emails found and the first findings
Elon Musk business email addresses are often used to register on porn sites :
📧 elon.musk@spacex.com / 📧 elon@tesla.com
- pornhub.com
- xnxx.com
- xvideos.com
📧 elonmusk@spacex.com / 📧 elon@spacex.com / 📧 elon.musk@tesla.com
- pornhub.com
As much as it’s rubbish, being a potential high target and using pro emails to register on such websites, that’s… strange.
📧 elon.musk@spacex.com
This email is linked to a Github account created quite recently, however, no activity has been recorded on it.
📧 elon@tesla.com
This email is tied to another Github account:
He did some commits on two projects, one being a game, another being the TSLA coin project :
The repo owner of “tsla-contracts' could also be Musk himself :
The repo links to two domains:
- tsla.finance
- tsla.network
One of them has been registered by a Tesla employee, who also owned other related domains:
Only tsla.finance seems to be alive, all the others (tsla.network included) are expired.
📧 elon@spacex.com
Using a breach record, I found that Musk email was part of an hacking forum, aimed at SIM swapping and other cybercrimes:
But no posts were found as part of my investigation, it can be a dummy account to follow new practices.
🥷 Many passwords also come from “stealer logs”, i.e. malicious programs that collect a lot of information on a PC.
Nobody’s safe from these little f*ckers…
Phone number
Musk leaked his own cell number back in 2017 :
I decided not to share the number, as it can be used by another person since the probably changed it.
Phone number is registered on:
- Snapchat
The last profile edit correspond to the timeframe when he leaked the number.
Public records
Voting data
A majority of US states have released their voters' data as part of the public records.
Musk has a couple of unexpected infos on them :
- Little Elm is the last location listed, it’s in the Dallas area and Musk can use a PO box so his real address isn’t known when he votes or makes donations…
…But he leaked another PO box :
-
Lakeway, TX 78734, that is also seen on his last donations records ⬆️
-
He’s listed as a “Special Agent” from the US security services, it’s definitely a trolling attempt as nothing has been confirmed yet.
Business & Properties
From the British business registry, some old Musk companies are listed and provide interesting infos :
Recently, SpaceX bought 10% of the same company that musk resigned 14 years ago:
We then get the address of an old Musk mansion from the registry:
On this website, we can see another corresponding address that has been linked to Musk:
This time, he used the full name: “PHD ELON MUSK”:
If “PHD” stands for the academic accomplishment, it’s another troll from Musk as he never got a PHD…
Plane(s) and others
From the FAA registry, Musk owns a couple of jets, or should I say behind the company “FALCON LANDING LLC”:
The LLC owns a couple of ships used by SpaceX:
Conclusion
Just by doing a quick analysis of Musk online footprint, we discovered some elements that could be used to pivot to tax investigations, unfold hidden companies and find more online activities.
OSINT baby!