Some hints to the web challenge EasterBunny @ HTB:

• Look into if you can poison some header.
• Find the postman.

Hope you find the correct Path..Good luck!