diff --git a/blockcheck.sh b/blockcheck.sh
index c2e9ff17..e7025e3e 100755
--- a/blockcheck.sh
+++ b/blockcheck.sh
@@ -1573,7 +1573,7 @@ pktws_check_domain_http3_bypass_()
 
 	for fake in '' "--dpi-desync-fake-quic=$ZAPRET_BASE/files/fake/quic_initial_www_google_com.bin"; do
 		for rep in '' 2 5 10 20; do
-			pktws_curl_test_update $1 $2 --dpi-desync=fake ${fake:+$fake }${rep:+--dpi-desync-repeats=$rep} && [ "$SCANLEVEL" != force ] && {
+			pktws_curl_test_update $1 $2 --dpi-desync=fake ${fake:+"$fake" }${rep:+--dpi-desync-repeats=$rep} && [ "$SCANLEVEL" != force ] && {
 				[ "$SCANLEVEL" = quick ] && return
 				break
 			}
diff --git a/docs/changes.txt b/docs/changes.txt
index a12d0650..d1d54e71 100644
--- a/docs/changes.txt
+++ b/docs/changes.txt
@@ -595,3 +595,8 @@ mdig: --eagain, --eagain-delay
 73.8
 
 nfqws: fix breaking tcp if ts fooling is enabled but no timestamps present
+
+73.9
+
+blockcheck: fix detection of http redirection if domain/URI specified
+install_easy: fix writing of ask_list variables
diff --git a/nfq/darkmagic.c b/nfq/darkmagic.c
index 1acded44..35db0f12 100644
--- a/nfq/darkmagic.c
+++ b/nfq/darkmagic.c
@@ -928,6 +928,7 @@ void proto_skip_ipv6(uint8_t **data, size_t *len, uint8_t *proto_type, uint8_t *
 	if (proto_type) *proto_type = 0; // put error in advance
 
 	HeaderType = (*data)[6]; // NextHeader field
+	if (proto_type) *proto_type = HeaderType;
 	if (last_header_type) *last_header_type = (*data)+6;
 	*data += 40; *len -= 40; // skip ipv6 base header
 	while (*len > 0) // need at least one byte for NextHeader field