Session['CookieDomains'] and iterate through the remaining domains, serving them in one page (which contains iframes already) // this might be slower because it means one additional roundtrip between client and server // approach 2: // let the client setup multiple iframes for all domains other than origin domains // this requires passing an array of domains to the client in asynchronous reply; which feels insecure ?>