Im getting it on the same domain, but the request can be sent from any domain, as long as the user is logged in. And yeah, but they aren't offering anything that would be worth the time.
(sorry for being oblique, but I have no way to contact you privately and ask you more directly!)