Identifier-like values observed across domains

{
  "findingId": "cross_domain_identifier_sharing_observed",
  "label": "Identifier-like values observed across domains",
  "category": "Third-party tracking",
  "criticality": "high",
  "evidenceConfidence": "review_signal",
  "directVsInferred": "direct_observation",
  "evidence": {
    "summary": "Retained outbound request evidence showed identifier-like keys or values moving to a different domain or third-party context within the observed scan scope.",
    "examples": [
      {
        "title": "Cross-domain identifier request example",
        "lines": [
          "artifact=req_004",
          "role=finding_supporting_artifact",
          "url=https://example.com/",
          "initiator_origin=https://example.com",
          "destination_origin=https://measure.example",
          "request_path=/collect [query_redacted=true]",
          "third_party_context=true",
          "identifier_like_keys=client_id, campaign_id [values_redacted=true]",
          "timestamp_ms=3180",
          "vendor_category=analytics_or_ad_measurement",
          "review_caveat=manual review should confirm purpose, identifier scope, consent timing, destination role, and whether the value is pseudonymous, scoped, hashed, or otherwise limited"
        ]
      },
      {
        "title": "Review context",
        "lines": [
          "possible_flow=analytics_attribution_or_ad_measurement",
          "source_domain=example.com",
          "destination_domain=measure.example",
          "identifier_values_redacted=true",
          "consent_timing_context=manual_review_recommended",
          "manual_review_needed=true"
        ]
      },
      {
        "title": "What should not count by itself",
        "lines": [
          "third_party_request_present=true [insufficient_without_identifier_signal]",
          "vendor=Example Measurement [insufficient_without_request_anchor]",
          "cookie_present=true [audit_only_without_outbound_transfer]",
          "query_key=id [insufficient_without_origin_destination_context]"
        ]
      }
    ]
  }
}