when I open upwork.com it has 6 iframes in it, including to accounts.google.com/o/oauth2... I'd imagine that's where the cookie goes, not to the parent frame.

when I open upwork.com it has 6 iframes in it, including to accounts.google.com/o/oauth2... I'd imagine that's where the cookie goes, not to the parent frame. You'd need to see which request has the cookie on it, not just which ones were set "when you viewed this page".