diff --git a/modules/criteoIdSystem.js b/modules/criteoIdSystem.js
index c73c4422a77..d7dff9949f4 100644
--- a/modules/criteoIdSystem.js
+++ b/modules/criteoIdSystem.js
@@ -90,7 +90,8 @@ function buildCriteoUsersyncUrl(topUrl, domain, bundle, areCookiesWriteable, isL
 function callCriteoUserSync(parsedCriteoData, gdprString, callback) {
   const cw = storage.cookiesAreEnabled();
   const lsw = storage.localStorageIsEnabled();
-  const topUrl = extractProtocolHost(getRefererInfo().referer);
+  const topUrl = extractProtocolHost(getRefererInfo().page);
+  // TODO: should domain really be extracted from the current frame?
   const domain = extractProtocolHost(document.location.href, true);
   const isPublishertagPresent = typeof criteo_pubtag !== 'undefined'; // eslint-disable-line camelcase