XSS challenge #3

Rules:

The task is: execute alert(document.domain).
The solution must work on current version of at least one major browser (Chrome, Edge, Safari, Firefox). It might be marginally better to use Safari, though.
~~If you find a solution, please DM me at Twitter: @SecurityMB.~~
The challenge is over. Here's a writeup.

Solvers