A perfectly innocent page. Scroll down for puppies.
Click for puppies
Same intent, different mechanism. Watch the Network tab: this one triggers a CORS preflight and gets refused. The form above does not.