Editing Marcotrix.xyz Reconnaissance Report (section)

== Scope and Authorization Boundary ==

This report was produced without domain-owner verification for <code>marcotrix.xyz</code>. Because of that, the work was intentionally narrower than the owner-authorized <code>430.ch</code> report.

Allowed and performed:

* Public DNS, WHOIS, RDAP, certificate transparency, public search, Shodan InternetDB, RIPEstat, and Wayback lookups.
* Ordinary HTTP(S) requests to publicly reachable pages.
* A shallow same-site <code>wget</code> mirror of linked public web assets.
* Targeted nmap checks only for ports already identified by passive sources or explicit DNS/service evidence.
* Local metadata inspection of files downloaded from the public site.

Not performed:

* Account creation.
* Login attempts.
* Writes to any Marcotrix service.
* Directory brute forcing or web fuzzing.
* Vulnerability exploitation.
* Broad UDP scanning.
* Full TCP port sweep.
* Publication of this report to a public wiki page.