Admin bot

POST /submit {"url": "http://xss:8080/..."} and an admin will visit it.