I had previously started 2 other threads here - regarding if there are other alternate serial pins on the ESP I can flash through (in case they have accessible traces because the usual ones don't), and if I can somehow issue http commands to the device to get it's firmware version (because that's important for knowing if sonota ota flashing can / will work). Photos of the board were attached to one of those other threads.
Trying different command-line arguments, and using tcpview, the switch makes no attempt to contact sonota on the listening ports 8080 or 443. Sonota does transmit my local wifi SSID and PW and the switch does connect to the local wifi (so that much does work) but I can't make anything happen beyond that.
The board does not have any traces to the TX/RX pins on the ESP8285 so if I want to flash this thing I'll have to solder directly to the pins. Anyone looking through ebay, aliexpress or banggood for these switches looking to buy one to flash, I don't know what to say other than maybe looking to see if the maker is Sonoff vs something else, or if "sonoff" is mentioned anywhere in the product name / description.
I have since ordered some new switches from a different ebay vendor, and these do say Sonoff. If I remember, I'll update this thread when I get them and see what I can do with them.