Comment by baobun

Everyone asking this should MitM their own browser and take a look into the requests.

Eye-opening and pretty straightforward with e.g. mitmproxy. Strip TLS with a temporarily trusted self-signed cert to get the whole picture.