domain must be passed in the query string