Overwrite document.domain with javascript

Question

I\'m trying to execute an XSSI on a test site. In the vulnerable site vuln.com there is a page vuln.com/xssi that dynamically load a script from vuln.com/displaysensitivedat