SSL Strip Attack — Full Timeline

SSL Strip is a classic downgrade attack: the attacker intercepts the server's HTTPS redirect and rewrites https to http, while the victim believes they're on a secure site. From plaintext request to leaked credentials, to HSTS killing the attack.