View-source on the housing-application site shows HTML comments that still name a staging hostname. What should the PORP-style researcher do?
Select an answer to reveal the explanation.
Short Explanation
HTML comments are like sticky notes left on the shop window — anyone walking by can read them. Staging hostnames in public source are collectible artifacts. Write them down; do not treat staging as a box to break into.
Full Explanation
Public HTML comments are website-OSINT artifacts, including leftover staging hostnames. The researcher records the comment text and URL in notes as evidence. PORP collection does not include attacking staging systems, guessing credentials, or "fixing" production by exploiting the CMS. Comments that never render in the layout still count because they are served to any client that views source.