Elon Musk posted that Grok @Bot can detect scam emails. Under that, Tesla Cybertruck engineer Wes Morrill (@wmorrill3) showed mail from noreply@x.ai that passed SPF, DKIM, and DMARC, carried Gmail’s blue sender check, and still felt wrong. The body invited him to an “X Founders Private Program” as SpaceXAI, with an Accept Invitation link. He asked Grok Bot for a security review. It found a hidden phishing link, explained why every mailbox check had passed, and drafted a report to xAI.
Cybernews (Oct 15, 2026) quotes Morrill: the attacker named an xAI team with raw HTML, and xAI’s invite template dropped that name into the mail without escaping it. The message really came from xAI’s own noreply@x.ai path. Authentication proved the platform sent it. It did not prove the team-name field was safe.
This is the same class as Gmail recovery-contact injection: real infrastructure, unsafe payload. Do not click. Type x.ai or x.com yourself.
Snapshot
| Field | Detail |
|---|---|
| Seen | Wes Morrill on X · amplified by Elon Musk (~Oct 14–15, 2026) |
| From | noreply@x.ai (display SpaceXAI) |
| Lure | “X Founders Private Program” · Accept Invitation |
| Why filters passed | Real xAI invite mail — SPF / DKIM / DMARC pass |
| Gap | Unsanitized team name in the invite template |
| Gmail blue check | Authenticated-sender UI — not an X Premium badge |
| CourtListener | 0 dockets on this invite campaign (Oct 15, 2026) |
Who is at risk
Anyone who might get an xAI team / agent invite — founders, engineers, journalists, and people in Elon-adjacent inboxes. Morrill is a Tesla engineer. A sibling warning on X around Oct 11 already described the same “X Founders Private Program” mail as coming from xAI’s developer-console team path.
A YubiKey on X or Google does not stop a click on a link inside mail that already authenticated.
What to watch for
- noreply@x.ai (or similar) inviting you to a private Founders / X / SpaceXAI program
- An Accept Invitation link you did not expect
- Gmail’s blue check used as proof the offer is real
- Follow-ups that ask you to log in, share a code, or connect a wallet
What to do
- Do not click Accept Invitation from that mail. Hover is not enough if the visible text was injected.
- Type x.ai or x.com yourself. If you use Grok, type grok.com.
- Report phishing at IC3. Forward samples to your security team — do not paste the HTML into a public thread.
- Put a YubiKey on X and on the mailbox that received the invite. That hardens account takeover. It does not unsay a click.
- Treat Grok Bot as a second opinion, not a vault. Cybernews notes Grok Bots share a per-user cloud computer — do not park credentials there for a phishing review.
MFA: YubiKey and Google Authenticator
X documents Authentication app (Google Authenticator-style TOTP) and Security key (FIDO2 / YubiKey-class) under Settings → Security → Two-factor authentication (X help). SMS 2FA was limited to Premium. Grade: Strong. MFA still does not validate a link inside an authenticated invite.
Google Account is Strong (sibling: Gmail injection). X Money is Strong on passkeys / hardware keys, with no open TOTP — that row is banking, not this lure.
| Grade | Meaning |
|---|---|
| Fail | No self-serve YubiKey / open TOTP — or SMS / email OTP remains |
| Pass | Self-serve Google Authenticator-style open TOTP |
| Strong | FIDO2 / YubiKey-class security key for sign-in |
| Platform | Grade | YubiKey | Authenticator |
|---|---|---|---|
| X | Strong | Yes | Yes |
| Google Account | Strong | Yes | Yes |
Directory: MFA support directory · Category → Social & Professional.
Recommended MFA tools
| Product | Best for | Get it |
|---|---|---|
| YubiKey 5C NFC | USB-C laptops + NFC phones | Amazon |
| YubiKey 5 NFC | USB-A desktops + NFC phones | Amazon |
| Proton Pass | Passkeys + authenticator-style TOTP | Proton Pass |
We may earn a commission if you buy a YubiKey or sign up for Proton Pass through the links above.
Independent cybersecurity audits
We audited reporting, sender, social, and Grok hosts on October 15, 2026. 100% is the ideal — none reach it. These scores are public email / transport / website posture. They do not score the invite template. A mailbox “pass” on one message is not a 100% Identity grade.
| Organization | Domain | Overall | vs 100% |
|---|---|---|---|
| FBI IC3 | ic3.gov | 87% | −13 |
| X | x.com | 84% | −16 |
| xAI | x.ai | 74% | −26 |
| Grok | grok.com | 67% | −33 |
| Domain | Identity | Transport | Website |
|---|---|---|---|
| ic3.gov | 90% | 45% | 97% |
| x.com | 90% | 15% | 90% |
| x.ai | 65% | 15% | 92% |
| grok.com | 40% | 45% | 97% |
Audit links: ic3.gov · x.com · x.ai · grok.com
x.ai Identity 65% / Transport 15% is the gap under a “we passed DMARC” screenshot. grok.com Identity 40% is the weak host for spoofed Grok notices. A June portfolio Musk-company scoreboard is a different, older snapshot — use today’s links.
Website stack note
Passive website-tech probes on October 15, 2026:
| Domain | Stack signal |
|---|---|
| ic3.gov | Undetected CMS; DigiCert TLS expires 2027-01-05 |
| x.ai | Undetected CMS; Google Trust Services TLS expires 2027-01-12 |
| x.com | Undetected CMS; Let’s Encrypt TLS expires 2027-01-02 |
| grok.com | Next.js; Google Trust Services TLS expires 2026-12-14 |
Point-in-time only. A marketing homepage is not an invite-template forensic finding.
Blacklist and lookalike domains
Email blacklist checks (public DoH, October 15, 2026): ic3.gov, x.ai, x.com, and grok.com were clear. An x.ai web/CDN SPFBL note is noise — do not lead it.
DNS lookalike scans (BEC profile, registered signals only):
| Brand scanned | To review | Likely owned | BEC staging |
|---|---|---|---|
| x.ai | 27 | 0 | 1 |
| x.com | 32 | 0 | 1 |
| grok.com | 34 | 0 | 0 |
High-interest registered names (investigate; not proof this invite used them):
| Lookalike | Technique | Note |
|---|---|---|
| xr.ai | insertion | BEC staging (NS + MX) |
| login-x.com | affix | Live NS + A + MX |
| support-x.com | affix | Live NS + A + MX |
| ngrok.com | insertion | ngrok (unrelated product) |
x.com appearing in an x.ai tld-swap list is the real X brand, not a squat. Type x.ai and x.com. Continuous monitoring: Cybersquat Domain Monitoring.
Related coverage
- Gmail recovery-contact injection
- Elon Musk companies domain audits
- Google redirect trust-proxy phishing
- MFA support directory
Run a free audit at audit.emailmenow.com or contact EmailMeNow for DMARC / MTA-STS and phishing-resistant mail aimed at the 100% ideal.
Sources: Wes Morrill and Elon Musk on X (~Oct 14–15, 2026) · Cybernews · X two-factor authentication help · IC3. Independent EmailMeNow audits, website-tech, blacklist, cybersquat, and CourtListener searches October 15, 2026. SpaceXAI LLC civil dockets (N.D. Tex. / D. Minn.) are unrelated to this invite. Domain scores: audit.emailmenow.com only.