One DNS Record: Grok Bot Audited His Site and Caught That Anyone Could Send Email as His Support Address
- Level Beginner
- Setup~30 min (estimated)
- Evidence Anecdotal
- CostNot stated in source
- No-codeYes
What they did
Is your business email easy to fake? He had Grok Bot audit a website that Claude had helped him build. It found there was no DMARC record, so anyone could spoof email from his support address. The bot explained the fix, and one DNS record later it was closed.
How it went
A plain-English security checklist with the exact DNS records to fix email spoofing.
Worth knowing
- One short X reply. Start DMARC at p=none and watch reports before moving to quarantine or reject, or you may block your own mail.
Prompt
Cleaned version rewritten from the source — not a direct quote.
Audit my website and domain [domain] for basic security and email problems. Check SPF, DKIM and DMARC records, HTTPS, and anything that would let someone send email pretending to be us. For each problem, explain it in plain English and give me the exact DNS record or setting to add. Don't change anything without my OK.
Recommended
Try it in Grok Bot
- Copy the prompt (button below).
- Open Grok Bot chat and paste it. Replace any [bracketed] placeholders.
- Connect the listed tools (Email) as connectors when Grok Bot asks.
- If the task repeats, ask: "Make this a daily routine."
Alternatives: the same prompt works in Claude, ChatGPT Agent, OpenClaw.
Set it up
Tools: Email · Stack: Grok Bot + domain DNS settings
- Read the original source for full context.
- Connect the tools your agent needs.
- Paste the prompt and replace [bracketed] placeholders.
- Run once manually and check the output before scheduling it.
Generic suggested steps, not from the source.
Evidence
First-hand X reply: site audit found no DMARC record (support address spoofable), fixed with one DNS record. Nothing sold
Source: X · 2026-10-22 · Verified by us: not yet · Report broken or outdated