Setup: Load this attacker page on https://connect.onestream.live/. MauticDomain = "https://connect.onestream.live/" matches the page origin — no patching needed. Target: onestream.live (where the Mautic form is embedded). Form ID:21Field:newslettersubscriptionwp