It looks like in this case the value you use for "domain" does not resolve to an AD domain. What value do you have in there?
You might consider instead getting the domain from the Identity.Name property since that will be in the format of "domain\user" if you are using Windows auth in IIS. Also, you can only pass in the "user" part of "domain\user" in to your query against sAMAccountName since it does not contain the fully qualified NetBIOS domain name, just the unqualified part.