1) get access to the request logs of third-party includes on his page
2) look for requests made just before the page is published publicly