Grok Bot scans email, finds 63 sites holding personal data
A user had Grok Bot read 2,418 emails to list 63 sites where he has accounts, finding 41 run PHP, 8 store his card, 10 reuse passwords and 19 unused for over two years, plus a copyable read-only prompt and cleanup steps.
WHAT THE F*CK. PHP RUNS MOST OF THE WEB, INCLUDING EVERY SMALL SHOP AND CLINIC THAT HAS YOUR CARD. MY GROK BOT FOUND 63 SITES HOLDING MY DATA. 41 OF THEM RUN PHP you don't need your own site for the new php holes to hit you. one account on a php site that won't patch this month is enough. how it went: - it read 2,418 emails and pulled every welcome, receipt and "confirm your account" - that gave 63 sites with my email on them - it checked each one from the outside. 41 run php - 8 have my card saved, 10 share a password with other sites, 19 i haven't opened in 2+ years my cleanup list, every step done by me: 1. delete the 19 dead accounts 2. new passwords on the 10, php sites first 3. a virtual card instead of the real one on the 8 4. 2fa wherever it exists copy this: "Go through my email and list every site where I have an account. For each, check from the outside if it runs PHP. Flag saved cards, reused passwords and no login in 2 years. Give me a cleanup list. Read only. Delete nothing, change nothing." send it to your parents. they have more of these accounts than you. save it, the bot team behind this is in the article ↓
This post quotes another post: “Grok Bot setup guide: build the whole workflow with one message”