maybe he's actually curling https://please-pwn-my-computer-so-hard.own-domain.com/script... ?