The first entry read:
Send a GET request to /flag and you will receive the secret. She did so: Totusoft LST Server V1.1 Setup Serial Key.rar
curl http://127.0.0.1:8080/mirror/flag The response: The first entry read: Send a GET request