Have Grok Bot investigate a suspicious email

An email passed SPF, DKIM and DMARC, but Grok Bot found the hidden phishing link and explained why the checks passed.

by Alex15 Oct 2026

Prompt for your agent

Goal: Check a suspicious email before clicking anything in it.
Setup: agents used in source: Grok Bot; tools/MCPs stated: email.
Steps:
1. Ask your bot to investigate the email.
2. Have it look for hidden links and explain why authentication checks (SPF, DKIM, DMARC) passed anyway.
3. Have it suggest a fix or prepare a report.
Rules: ask me before anything irreversible (sending, posting, paying, deleting); don’t invent data, results or tools I haven’t given you; tell me what you couldn’t verify.
Note: A single shared example; it says nothing about how reliably it catches scams.
Based on: Alex — https://x.com/alexmichaelio/status/2110574355256394089

Steps are from the source. Includes a “Based on” credit line.

I tried this

Tell the next builder. One anonymous answer each; click again to undo.

Agents, models and tools only what the source states

Agents
Grok Bot
Tools
  • email

Sources & credit