Detect 3rd-party domains in Set-Cookie header.