He used a legitimate endpoint to dump the license