XSS Challenge #2

Welcome to my second XSS challenge!
This challenge's goal is to execute an alert() on this page, by following the rules.

The payload has to does not include the word "Type" (encoding is possible, but URL-encoding doesn't count).
The payload has to be working on a modern browser.

http://secbot.me/xss-challenges/xss-challenge2.php?xss=[Payload]