unsecure domain bug