while doing a penetration test you discover that the organization is using one domain for web