`cache/_ga4_inject_GROUND_TRUTH.md`

75 lines
# GA4 inject targets — verified ground truth (2026-08-17)

Probed all 24 newly-created GA4 properties (`_ga4_inject_ids.json`) against their LIVE
domains + framed/redirected targets. Finding: **only 6 of 24 properties are actually
collecting data.** The other 18 were minted for domains that have no injectable live
page under our control right now — injecting further just fragments data into empty
properties.

## ✅ DONE — 6 correctly tracked (Kamatera nginx; live gtag == our property)
designersalesreps.com · fabricfriday.com · patterndesignlab.com ·
wallpaperdictionary.com · wallpaperhistory.com · wallpaperwednesday.com

## ♻️ Redundant new property — site already tracked elsewhere (no action needed)
- **67calc.com** — GoDaddy masked-frame over `67-…vercel.app` (calc-67 repo), which
  already runs its own `G-7K9CPBPFLD`. Our new `G-QT01T2V3F0` is empty/redundant.
- **designerssalesreps.com** — alias/redirect to designersalesreps.com; shares
  `G-J4BCJ7GZYR`. Our new `G-9YX437H6DC` is empty/redundant.

## ⛔ Masked-forward over an external app — GA4 belongs in the framed repo (GATED + blocked)
GoDaddy domain-forwarding framesets; the real app is a Netlify/Vercel deploy whose
source was NOT found under ~/Projects. Injecting requires locating that repo + redeploy.
- wallsondemand.com  → `cerulean-cassata-6f80a3.netlify.app` (no gtag)
- muralsondemand.com → ip-10-124 frameset (netlify/vercel target)
- wallpaperondemand.com → ip-10-124 frameset
- fabricsondemand.com → ip-10-124 frameset

## 🏗️ Parked stub / JS-redirect — no real content page to inject (needs a site build, GATED)
askgoodquestions.ai (→/lander) · bubbeleh.ai · commercialdesignreps.com ·
designerrepresentatives.com · designerwallcoverings.ai · designtradelive.com ·
greendomainbrokers.com · hospitalitysalesrepresentatives.com · iwascute.com ·
wall-papers.org · wallsandfabrics.com

## 💀 Dead / unreachable
dsgntv.com — DNS/connection error at probe time (retry later).

---
### Recommended next steps (all GATED — Steve's call)
1. **Consolidate the redundant properties.** 67calc + designerssalesreps new properties
   sit empty. Either point the framed app at the new ID, or delete the new property
   (GA4 delete = destructive external → gated). Lowest-value; leave as-is is fine.
2. **Locate the 4 ondemand Netlify/Vercel repos**, add gtag in-app, redeploy (gated).
3. **11 stubs need an actual site** before analytics means anything — this is the
   "create websites in the flow" bucket; domain-landings can serve them, then repoint
   DNS off the GoDaddy forward (gated DNS + deploy).
4. Retry dsgntv.com probe.

**Bottom line:** the property-creation batch over-provisioned — 18 properties are premature.
No further *injection* is correct until each domain has a real, self-served page. This
matches the DTD panel's read that the remaining portfolio work is gated, not quick.

---
## 2026-08-20 re-verification (claude-run-10636, TK-10636)
Re-probed the whole set with fresh evidence:
- **6 deployed-live sites STILL serving correct GA4 (curl-verified live):**
  designersalesreps.com·G-J4BCJ7GZYR, fabricfriday.com·G-Z3SRYFXLZR,
  patterndesignlab.com·G-FJJKTKH0VE, wallpaperdictionary.com·G-FL92MQYWRD,
  wallpaperhistory.com·G-KHPFEJ27QS, wallpaperwednesday.com·G-76E6K13TNG. ✅
- **3 EJS local server.js already carry canonical existing IDs** (no stale drift):
  commercialdesignreps·G-PRJ51PTW5G, designerrepresentatives·G-MVZFTCQY3X,
  designtradelive·G-E8R8V9RDXN. ✅ (the "prep-work" recommended 08-20 06:22 was already satisfied)
- **Detector NEEDS_INJECT = 0.** ✅
- **STALE-IP CORRECTION:** the 12 "parked" ondemand/stub domains now resolve to
  Kamatera (45.61.58.125) via 8.8.8.8 — NOT the AWS/GoDaddy IPs (3.33.x/15.197.x) the
  detector buckets still record. BUT they are STILL NOT injectable: Kamatera has no
  vhost/cert for them — port 80 returns a bare `301→https://<domain>/` into a
  non-existent HTTPS server block (TLS verify_result=1, handshake fails on 443);
  dsgntv.com is additionally ISP-intercepted (charter cujo block page). Making any of
  these injectable requires a GATED site-build + nginx vhost + Let's-Encrypt cert +
  DNS-content step — exactly the HOLD Steve ruled 2026-08-19. Verdict unchanged; only
  the stored IPs were stale.

**Net: all non-gated GA4-injection work on TK-10636 is complete + verified.** The residual
is the separate "build a real landing then repoint" workstream (all-dw-agent scope), NOT
GA4 injection, and stays HOLD-for-Steve.