Scammers impersonating Elon Musk and Tesla Foundation

[firefly]

The fake bank used in scam claims to be Hills Offshore Finance Home.

From the fake bank websites:

Hills Offshore Finance Home was founded as a regional bank in Southern California dedicated to customer service and a commitment to our community. As a division of CIT Bank, N.A., that commitment continues and we're proud to be Southern California's hometown bank. Headquartered in Pasadena, our executive team is comprised of industry leading experts who reside in Southern California and understand the local market and economy. With a strong capital foundation and consistent focus on providing value to our customers, we offer a full suite of banking services customized to your specific individual or business needs.

Contact details:

+1 (617) 729-7687
Email: info@hillshomeonline.com

+16177297687
Number billable as geographic number
Country or destination United States
City or exchange location Quincy, MA
Original network provider* Global Crossing Local Services, Inc.-ma


Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=156056

From the domain name registration:

Domain Name: HILLSHOMEONLINE.COM
Updated Date: 2022-04-04
Creation Date: 2020-04-04
Registrar Registration Expiration Date: 2023-04-04
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: hope jeremy
Registrant Organization: stayAtHome Campaign
Registrant Street: no 8 south East Rd Rivers state no 8 south East Rd Rivers state
Registrant City: Portharcourt
Registrant State/Province: Rivers state
Registrant Postal Code: 110001
Registrant Country: NG
Registrant Phone: +234.8022190242
Registrant Email: stayhomeonline@yahoo.com

This is what the fake bank website looks like:

[firefly]

Elon Musk Foundation has donated $5,000,000.00 USD to you.

Header:

Received: from moitsrv07.moit.gov.vn (moitsrv07.moit.gov.vn. [103.9.0.52])
Subject: Reply Immediately
Date: Sun, 24 Apr 2022 10:13:19 +0000
Message-ID: <49a58be1921849d49c25fc0033ff872d@moit.gov.vn>
Reply-To: "elonmusk@donationdetails.com" <elonmusk@donationdetails.com>
x-originating-ip: [212.30.36.59]

Originating IP: 212.30.36.59
Country of Origin: Lebanon

[Big Al]

Elon Musk donation scam:

This email is from Elon Musk and the Founder, CEO and Chief Engineer of Team SpaceX; early-stage investor, CEO and product architect of Tesla, Inc.; Founder of The Boring Company; and co-founder of Neuralink and OpenAI. With an estimated net worth of around $245 billion. Your email was randomly selected from a European email database and you received 10 BTC (BITCOIN) equal to 4,124,270.00.

Please take this email very, very seriously and email: elonmuskdonation99@gmail.com

Header:

Return-Path: <changchangmei94@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
From: Elon Musk Team <elonmuskdonation99@gmail.com>
Date: Tue, 31 May 2022 03:57:40 +0200
Message-ID: <CAP6XL6PRYEYfeQftPrEZnYVOa9XT3V+WsfyyDsU52qBYs-Nk-w@mail.gmail.com>
Subject: 10 BTC DONATION

[firefly]

Your email was randomly selected from a trusted email database and you received 130 BTC (BITCOIN) equal to $4,124,270.00.

This email is from Elon Musk and the Founder, CEO and Chief Engineer of Team SpaceX; early-stage investor, CEO and product architect of Tesla, Inc.; Founder of The Boring Company; and co-founder of Neuralink and OpenAI. With an estimated net worth of around $245 billion.

Please take this email very, very seriously and reply this email.

Header:

Message-ID: <62ba3986.1c69fb81.f932a.46a8SMTPIN_ADDED_MISSING@mx.google.com>
Received: from [154.16.157.150] (port=57954 helo=APPLE09B3.localdomain)
Subject: $4.124.270,00
From: Elon Musk Team <bacup@angeltravel.bg>
Date: Tue, 28 Jun 2022 01:12:37 +0200
Reply-To: elonmuskteam@outlook.com

Originating IP: 154.16.157.150
Originating ISP: Reliablesite
City: Denver
Country of Origin: United States

[firefly]

Reply received:

Greetings from Team Elon Musk.

I confirm receipt of your e-mail. The email is from Elon Musk and Team The Founder, CEO and Chief Engineer of SpaceX; Early stage investor, CEO and product architect of Tesla, Inc.; Founder of The Boring Company; and co-founder of Neuralink and OpenAI. With an estimated net worth of around $245 billion. Your email was randomly selected from the European email database and you received 130 BTC (BITCOIN), which is equivalent to $4,124,270.00.

More about Elon Musk can be found at: https: // en.wikipedia.org/wiki/Elon_Musk

To make it easier for you to receive funds donated exclusively to you (130 BTC (BITCOIN) equals $4,124,270.00), please send me the following information (I only requested this information to know who we are donating to and for identity theft on the Internet I have victims on the Internet) I do not know that you have asked for your ID in the past, because we don't want to give the impression that I'm trying to steal your identity.

Required information:
Name of beneficiary:
Telephone:
Home address:
Country:
Birthday:
Gender:
Marital status:
Occupation / Activity:

Please also let us know if you are familiar with Bitcoins or would like the funds to be converted and come through the bank. I hope you can put the funds to good use in your state/region. We donate to reduce poverty in your area and improve the standard of living of as many people as possible, as this is the sole purpose of donating this money to you. We want you to assure us that you will follow our instructions and help our organization realize their dream before giving you all the information you need to get the money. If you feel like you can't handle this money, please let me know quickly so we can send it to someone else.

Also, we advise you to keep this email private and confidential to avoid anyone trying to claim your money.

Best regards and God's blessings.
Elon Musk and team.
CEO and Chief Engineer at SpaceX;
Early-stage investor,
CEO and product architect of Tesla

Header:

Return-Path: <elonmuskteam@outlook.com>
From: elon musk Team <elonmuskteam@outlook.com>
Subject: Re: $4.124.270,00
Date: Wed, 29 Jun 2022 05:56:19 +0000
Message-ID:
<PH0PR20MB370482DDBE84C62FA7989041C9BB9@PH0PR20MB3704.namprd20.prod.outlook.com>

[firefly]

Reply received:

Greetings from the team,

Thank you for your answers..

Your details have been sent to my bank (Natwest Bank) and the International Banking Payments Unit is waiting for a confirmation email from you. You will need to email my bank and provide this donation reference number [APC4322022] to verify and simplify the payment process for the 130 BTC (BITCOIN), which is equivalent to $4,124,270.00. I urge you to work with my bank to facilitate a smooth and successful transfer of the money I have donated to you.

The gift can be requested via BTC or converted into cash and sent by bank transfer. I also opened a double claim last week as recipients were informed that friendly relatives, lawyers and third parties have closed their donations. As a result, these close friends, relatives, lawyers, and third parties tried to solicit gifts on behalf of the actual recipients, which caused problems for my bank. Please note that the double claim identified in the withdrawal process will certainly result in the cancellation of this donation, resulting in a loss for both the double and the actual beneficiary, so you should keep this secret.

You are fully responsible for your donation. You are hereby requested to keep your data strictly confidential until your authorization is fully restored by the Bank.

Now that you are aware of the nature of the donation, I have provided this reference [APC4322022] with a donation code number, which must be kept strictly confidential as you will use it to request this donation. You must contact the management of my bank (Natwest Bank) immediately to proceed with the transfer of your donation. The bank will give you more information about how to make the transfer to your account.

If you follow the bank's instructions carefully, you will receive this donation within the next two (2) business days, as these funds are already available for payment at my bank.

BANK CONTACT INFORMATION BELOW.

Bank name: (Natwest Bank)
Email: services@natwestsaving.com
Bank director: Mrs. Amelia Connor

Please contact my bank at this email address {services@natwestsaving.com} to complete this transfer.
NOTE: ONLY CONTACT MY BANK FOR DONATION TRANSFERS AND FOLLOW THE BANK'S INSTRUCTIONS.

Remember that the purpose of this donation is to remarkably improve the standard of living of the less privileged people in your area and within yourself. Make the most of it and have a positive impact on the lives of others.

Thank you for your understanding

Sincerely,
Elon Musk Team.

[firefly]

Reply received:

NATWEST BANK AND FINANCE GROUP PLC.
24Hours Online-Banking Service
EC, 1 Princes St, London EC2R 8BP, United Kingdom
Customer Information Service

Hello,

Thanks for getting back to us and I am very glad you are taking this very seriously because opportunities like this come but once in a lifetime.

You have chosen option 2 which is to open a new bank account with Natwest Bank and have your online banking details sent to you, to enable you transfer your funds via Online Banking Wire Transfer.

One more thing to do is choose the type of account you want to open from the options below and fill out the BANK ACCOUNT APPLICATION FORM.

Account Activation Opening Balance

(1) Current Account Opening Balance - £1,500.00

(2) Domiciliary Account: £3,550.00

(3) Offshore Account Opening Balance - £5,150.00

FILL OUT THE BANK ACCOUNT APPLICATION FORM AND SEND IT BACK TO US ASAP.

First Name:
Middle Name:
Surname:

Gender:
Marital Status:
Nationality:

Date of Birth:
Place of Birth:
Mailing Address:

Identity Number:
identity issue date:
identity Expiry date:

Employment Status:
Occupation:
Monthly Income:

Age:
Phone Contact:
Next of kin:
Home Address:
Type of Account:

Please fill out the Bank Account Application Form and send it back to us as soon as possible and also choose the type of Account you want to open so we can move to the next step.

Looking forward to your reply.

Mrs. Jessica Mount.
Natwest Group
EC, 1 Princes St, London EC2R 8BP, United Kingdom

Header:

Return-Path: <services@natwestsaving.com>
Received: from [127.0.0.1] (port=45096 helo=premium88.web-hosting.com)
by premium88.web-hosting.com with esmtpa (Exim 4.95)
(envelope-from <services@natwestsaving.com>)
id 1o8DA9-000uJG-3H
Date: Sun, 03 Jul 2022 23:54:17 -0400
From: services@natwestsaving.com
Subject: Re: Donation
User-Agent: Roundcube Webmail/1.4.12
Message-ID: <4345816268aa850dffc21afdab4d263a@natwestsaving.com>

[firefly]

The fraudulent domain name used in scam is a spoof of NatWest Bank.

There is no content, the domain name being used only for the email address, as in services@natwestsaving.com.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=157081

From the domain name registration:

Domain name: natwestsaving.com
Updated Date: 2022-05-08
Creation Date: 2022-05-08
Registrar Registration Expiration Date: 2023-05-08
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: Redacted for Privacy
Registrant Organization: Privacy service

[firefly]

Reply received:

NATWEST BANK AND FINANCE GROUP PLC.
24Hours Online-Banking Service
EC, 1 Princes St, London EC2R 8BP, United Kingdom
Customer Information Service

Dear Valued Customer,

Please find below Banking Details to make payment and send proof of payment.

Banking Details.

Name: K. M.
Account: 913933xxxx
Bank: Citibank
Routing number: 266086554

Kindly make payment and send proof of payment..

Looking forward to your answer.

Mrs. Jessica Mount
Natwest Group
EC, 1 Princes St, London EC2R 8BP, United Kingdom

Header:

Return-Path: <services@natwestsaving.com>
Received: from 185.61.154.215 (EHLO premium88-3.web-hosting.com)
Date: Fri, 08 Jul 2022 13:54:05 -0400
Subject: Banking Details.
User-Agent: Roundcube Webmail/1.4.12
Message-ID: <dd9aa8af4095e8cb38a137aedc5c1129@natwestsaving.com>

[Big Al]

Your email was randomly selected to received a donation of 20 BTC (BITCOIN) equal to $395 162.00 from Elon Musk.

Elon Musk is the Founder, CEO and Chief Engineer of Team SpaceX; early-stage investor, CEO and product architect of Tesla, Inc.; Founder of The Boring Company; and co-founder of Neuralink and OpenAI. With an estimated net worth of around $245 billion.

To claim your donation contact us via email.

Header:

Return-Path: <ludovic.pari@univ-paris13.fr>
Received: from APPLE09B3.localdomain (unknown [62.182.98.154]) (using TLSv1 with cipher DHE-RSA-AES256-SHA
Subject: 20 BTC from Elon Musk
To: Recipients <ludovic.pari@univ-paris13.fr>
From: Elon Musk Team <ludovic.pari@univ-paris13.fr>
Date: Thu, 14 Jul 2022 14:22:31 +0200
Reply-To: elonmuskbusinessteam@gmail.com
Message-Id: <20220714122244.4D52E3EA18B@smtp.univ-paris13.fr>

Orig IP: 62.182.98.154 | Orig ISP: Clouvider Limited | City: Mumbai | Country: India