He started by editing the page & loading/testing it locally on his Windows machine, so analytics logged a file path including his username (his name). There are repeated hits from the same mobile ISP over 48hrs
Eventually he switched to loading it from hosting via a fqdn https://twitter.com/bentasker/status/1562040721049280513/photo/1