The domain for which the cookie is valid. The default is the host that this cookie has been received from. Note that, for instance, ".bing.com", "bing.com", and "www.bing.com" are considered different domains.

The caller must free the returned string with CoTaskMemFree. See API Conventions.