Some sites rely on multiple domains to work. E.g. open auth, cdns are usually a separate domain, a lot of big corporates create new domains for “microsites” when they want to do something new but are tied down by slow moving corporate practices (although the world would be a better place without microsites).
Basically, you couldn’t do it without breaking a large part of the internet.
So by my logic - if you tried this exploit and it failed the first time, then worked the second time: No one else has tried it before you. Otherwise it would either have worked the first time (if you guessed the same pass) or not worked at all (if the first time it was tried a different pass was used).
This is true I guess. I haven't seen their contract. I've never had an issue with any noncompetes in my contracts though. I can see why you wouldn't want to employ and train people in your business only for them to go to a direct competitor. I think that's fair, you just need to look for a good job in an unrelated business.
Keep this in mind: It's easier to find a job when you already have one. It takes the stress off the process and you automatically become more desirable for some reason.
If I were you I wouldn't cut off the opportunity immediately, but I would continue looking for another job at the same time. The world has changed in the last few decades in terms of job loyalty so there won't be any kind of stigma against you if you only stay for a short while and you can say "I was offered a better job" as the reason for leaving.
Basically, you couldn’t do it without breaking a large part of the internet.