Thats not pentesting.

I don't pentest operational sites without explicit contracted permission.