-- THIS IS FOR TESTING ONLY --

Message :

<script>alert(document.domain);</script>



1. Point your host file to 198.187.29.119 domain.com (clear dns cache if needed)
2. Then visit https://domain.com accept the invalid SSL cert on your browser.
3. Inject scripts to evaluate CORS as needed.