diff --git a/components/webauthn/android/java/src/org/chromium/components/webauthn/AuthenticatorFactory.java b/components/webauthn/android/java/src/org/chromium/components/webauthn/AuthenticatorFactory.java
index 6769fb488450bd..49b8623429207d 100644
--- a/components/webauthn/android/java/src/org/chromium/components/webauthn/AuthenticatorFactory.java
+++ b/components/webauthn/android/java/src/org/chromium/components/webauthn/AuthenticatorFactory.java
@@ -7,9 +7,11 @@ package org.chromium.components.webauthn;
 import android.content.Context;
 
 import org.chromium.base.ContextUtils;
+import org.chromium.base.Log;
 import org.chromium.blink.mojom.Authenticator;
 import org.chromium.build.annotations.NullMarked;
 import org.chromium.build.annotations.Nullable;
+import org.chromium.content_public.browser.LifecycleState;
 import org.chromium.content_public.browser.RenderFrameHost;
 import org.chromium.content_public.browser.WebContents;
 import org.chromium.content_public.browser.WebContentsStatics;
@@ -55,6 +57,20 @@ public class AuthenticatorFactory implements InterfaceFactory<@Nullable Authenti
         CreateConfirmationUiDelegate createConfirmationUiDelegate =
                 mConfirmationFactory == null ? null : mConfirmationFactory.create(webContents);
         Origin topOrigin = webContents.getMainFrame().getLastCommittedOrigin();
+        // -------------------------------------------------------------------
+        // POC instrumentation: print the calling RFH's lifecycle state and the
+        // topOrigin we are about to hand to AuthenticatorImpl. When the bind
+        // originates from a BFCache'd renderer this prints
+        //   lifecycle != ACTIVE  callerOrigin=<attacker>  topOrigin=<victim>
+        // -------------------------------------------------------------------
+        Log.e(
+                "WebAuthnPOC",
+                "createImpl: lifecycle=%d (ACTIVE=%d) callerOrigin=%s topOrigin=%s wcVisible=%s",
+                mRenderFrameHost.getLifecycleState(),
+                LifecycleState.ACTIVE,
+                String.valueOf(mRenderFrameHost.getLastCommittedOrigin()),
+                String.valueOf(topOrigin),
+                String.valueOf(webContents.getVisibility()));
         return new AuthenticatorImpl(
                 context,
                 webContents,