Hey Shamin,

I reported without purchasing it, in the case if target company asks to demonstrate the scenario in real world then you need to buy the domain.

Thanks.