Ask HN: Help extract address lookup call from Spectrum's website?

I noticed when I go to Spectrum's opt-out page (https://www.spectrum.com/policies/your-privacy-rights-opt-out) it fetches my exact address in the background (down to the apartment number) before I've filled anything in. In Chrome or Firefox you can just hit F12 and choose the "Network" tab before loading the site, scroll halfway down to click on the 'tnt.js?userProfile=' request, and look at the "Response" data to see your address.

Inconveniently, it doesn't fill in the form to save customers' some unnecessary typing. I would like to turn this into a more general lookup service, making a few requests in a command-line python program instead of opening a browser, but I'm having trouble figuring out what sequence of requests, headers, and post data is needed to get it to work in isolation. Nothing malicious here, it would just help to know when remote employees have moved and forgotten to update HR.

It seems it first does a basic GeoIP request to (https://www.spectrum.com/bin/spectrum/residential/akamaiheaderloader), then uses those values (like approximate city, zip code, etc.) as arguments in the request to (https://www.spectrum.com/bin/spectrum/tnt.js?userProfile=...) which returns everything from the date the service was started, zip+4, apartment, whether you subscribe to voice or mobile service, business or residential service, and it appears it even hints at billing. But it balks at curl requests so it seems to be checking for some very specific order of requests. Anyone interested in figuring it out?