GET aHEAD

Inspect and open Networks Tab. We observe that a GET request is sent for Red and POST for Blue Using BurpSuite, intercept the request, change the method to HEAD (hinted from the title), and forward the request. Response headers contain the flag.