[*] POC server listening on 0.0.0.0:8080
[REQ] host=localhost:8080       path=/victim.html                                  Sec-Fetch-Site=none         Cookie=<absent>
[REQ] host=127.0.0.1:8080       path=/attacker.html                                Sec-Fetch-Site=none         Cookie=<absent>
[REQ] host=localhost:8080       path=/favicon.ico                                  Sec-Fetch-Site=same-origin  Cookie=session=victim-strict-secret
[REQ] host=127.0.0.1:8080       path=/favicon.ico                                  Sec-Fetch-Site=same-origin  Cookie=<absent>
[REQ] host=127.0.0.1:8080       path=/attacker2.html                               Sec-Fetch-Site=same-origin  Cookie=<absent>
[REQ] host=localhost:8080       path=/transfer?to=evil&amt=1000000                 Sec-Fetch-Site=cross-site   Cookie=<absent>
[!!!] /transfer hit -> Sec-Fetch-Site: cross-site | SameSite=Strict cookie absent