[kzrdude]

it does say "Not secure" for the https info, so I guess they intercept the request

[disiplus]

yeah but not secure is regular http. on https they cannot do that without triggering a browser warning.