while doing a penetration test you discover that the organization is using one domain for web publishing and another domain for administration