It probably fingerprints the browser via TLS fingerprinting.