The user never interacted with this page. If the share sheet shows victim.example/secret-canonical-7f3a and the title VICTIM-SECRET-TITLE-7f3a, the cross-origin leak fired.
victim.example/secret-canonical-7f3a
VICTIM-SECRET-TITLE-7f3a