This HTML page is inside the protected/challenged path. It loads app.js, which fetches api-test.json.
app.js
api-test.json
Loading app.js...