The challenge was consisting in gaining a note containing the key, from admin. In this site you can create, view you notes and also submit on “Optional Links” a link that will be visit by admin. So at this point the game is done just put on that a link that grabs the request headers the admin sends and infact on Referrer field there was the link pointing on keys' note.