[heyheyhey]

> The URL used in the XHR points to this (accessing directly only shows a '0' but with archive.is you get that JavaScript): https://archive.is/TxFWj

How did you get from the XHR to that script inside that archive?

[livre]

The XHR contains the URL: xmlHttpRequest.open("GET", 'https://statcdn.net/app/?id=8438fce9-6d9a-45c4-ba2c-e643c129...', true);

Since opening that URL directly in the browser didn't work I tried archiving it and it worked. Then I shared the archive link here.

It seems that they implemented some poorly done access control that is letting archive.is see the contents but not web browsers when visited directly.