The XHR contains the URL: xmlHttpRequest.open("GET", 'https://statcdn.net/app/?id=8438fce9-6d9a-45c4-ba2c-e643c1291253 https://statcdn.net/app/?id=8438fce9-6d9a

The XHR contains the URL: xmlHttpRequest.open("GET", 'https://statcdn.net/app/?id=8438fce9-6d9a-45c4-ba2c-e643c1291253 https://statcdn.net/app/?id=8438fce9-6d9a-45c4-ba2c-e643c129...', true); Since opening that URL directly in the browser didn't work I tried archiving it and it worked. Then I shared the archive link here. It seems that they implemented some poorly done access control that is letting archive.is see the contents but not web browsers when visited directly.