Are we supposed to be guessing credentials on the a**** panel or the i**** subdomains? Guess the box eh.