The vmDomainLock option restricts the obfuscated code to a list of specific domains and/or sub-domains. When the protected code runs on a different domain, it redirects to vmDomainLockRedirectUrl instead of executing.

This is the VM-aware counterpart of the non-VM domainLock option. When vmObfuscation is on, the non-VM domainLock is ignored — use vmDomainLock instead.

Supported entry shapes:

• Exact host — example.com
• Wildcard subdomain — .example.com matches example.com and any subdomain
• Specific subdomain — app.example.com