PoC details available to authorized researchers only. Contact for access.
Generic data capture endpoint.
DOM and cookie capture.
Active research on deep linking implementation. Multiple redirect vectors identified. Security header misconfigurations observed. Full details in private documentation.