GET /js/application.js?v=1 HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/?r=Pushub_VT_Popunder_CPM_ALL_16_01_2025&sub1=435368_739687_click-now-extra-special.online&sub2=binom_postback&sub5=u8svSN7OM8U&sub6=522582tqnuqg58n50a
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: application/javascript
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"cd71b75caec6e1831b7dbed5565bf835"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ESbi4rMv%2BbM3MixAHgu23B3qNy0zvUJ7Oa1n%2BRhbPkDGZPB6eF4RuCh3G7%2BsISPSUhE5f05f6obprvmMRZjXUpgZlfKbbUGsZkNRkopRoea7GAIn9nVzvNAapv1SN9tHzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b595f4ee15696-OSL
X-Firefox-Spdy: h2

GET /gtag/js?id=G-YVNDZ4EGMZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 21 Jul 2025 14:22:12 GMT
expires: Mon, 21 Jul 2025 14:22:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 133735
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /land_en/images/sprite.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/?r=Pushub_VT_Popunder_CPM_ALL_16_01_2025&sub1=435368_739687_click-now-extra-special.online&sub2=binom_postback&sub5=u8svSN7OM8U&sub6=522582tqnuqg58n50a
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"c79fdc79212e33d0e660635b873cf134"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZK1J6hTvw5kmy8m%2BVRfOr1J%2BXjnsqzxpVDnF8PmRdUJZ%2BLJQoiBRSe4H9UZ0Q6qgXHR3jC2dk11e99ZKLb08yMn9m467KYPQENIpXGKByds41QZkcVdg7be97c61IZRWvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b5961696c5696-OSL
X-Firefox-Spdy: h2

GET /land_en/images/load/2.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/css/style.min.css?ver=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"e3555f14e94ce15542633875a33ebca9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b2saB3A%2FzJoWMFaPKyZEF0BiWPL%2Bo7UaVX2OQl4IPwN5xXyeEDM0C0uEeXs2d%2BFoqcAb6%2FEuVewTKnlfJdwCBX%2FoRL7QdxDTZXsPgE21nGh2SMGTilh8YXDXucLhYynggQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b596179805696-OSL
X-Firefox-Spdy: h2

GET /land_en/images/load/5.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/css/style.min.css?ver=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"4b79e4c866226311af35b7768a8680f5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yks8GFRQVxI2tt4PxcOjY4gzMZ1fP1HBBwwR6yr9CCXA4LwkjyWHyJq8UW5EGvJSgOXlLOilIGK5yAOBXjdHEmWpJBLAJP%2B9SetsV4ob5y4%2FqQcMbEn4ouN0dvzmxfYDQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b5961798c5696-OSL
X-Firefox-Spdy: h2

GET / HTTP/1.1
Host: pdg7y.click-now-extra-special.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Mon, 21 Jul 2025 14:22:09 GMT
location: http://click-v4.mainexclkdir.com/click?i=dhhSotjfmiw_0
server: Cowboy
set-cookie: sid=16337996-663e-11f0-9f30-32f566d5820a; path=/; domain=.click-now-extra-special.online; expires=Sat, 08 Aug 2093 17:36:16 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2

GET /land_en/?r=Pushub_VT_Popunder_CPM_ALL_16_01_2025&sub1=435368_739687_click-now-extra-special.online&sub2=binom_postback&sub5=u8svSN7OM8U&sub6=522582tqnuqg58n50a HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://push.newsvot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
server: cloudflare
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prS7kYvKlmL5s42FZAelva5%2FAniM8wlQqV4Q%2BzOU7DRDS4hx9DQGk97PzSmoflL6ueIBO0rsXg60YRafuO4HlPO6Yi7S5Tv5VDgcqaZzGqK07ymeg%2BOlyj7Kve8QQkAWMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
content-encoding: br
cf-ray: 962b595c9bd55696-OSL
X-Firefox-Spdy: h2

GET /css2?family=Manrope:wght@400;500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 21 Jul 2025 14:22:12 GMT
date: Mon, 21 Jul 2025 14:22:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /land_en/images/load/3.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/css/style.min.css?ver=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"aae822b402edb42f6af7c31ed5747c72"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jc%2FbSBarh0W4rpy%2Bme1Fn0f9OYkAAErHkhFYpGqaXHdt2iClIFeqeAawvw2klVmLnBPA2nn27DPjAGoXuDBJ94AAeynp4Eu3seg%2FSiIjg23nTcNXiMpBQv0C%2Fm6Ye1kGnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b596179885696-OSL
X-Firefox-Spdy: h2

GET /land_en/css/baloon.min.css?ver=1 HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/?r=Pushub_VT_Popunder_CPM_ALL_16_01_2025&sub1=435368_739687_click-now-extra-special.online&sub2=binom_postback&sub5=u8svSN7OM8U&sub6=522582tqnuqg58n50a
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: text/css; charset=utf-8
content-encoding: br
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"3a75fc4bfd60a0b42c4d8827868e3a1f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tdfduTGika8GCkhyKGlWal1A2sSoeYzWRm1sv9dcjyT7YOrN5ejlZGVqt7x82iwW4p%2BOepifYXdr%2BNJgx7HCOIJA2NJCpi9XaZl50QiG4UUB0WF3qEbL1oZtq6PU7E1yKyTR%2B5d9FMsJB%2F3KUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b595f4edb5696-OSL
X-Firefox-Spdy: h2

GET /s/manrope/v19/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mmentorapp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24836
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:22:56 GMT
expires: Fri, 17 Jul 2026 10:22:56 GMT
cache-control: public, max-age=31536000
age: 359956
last-modified: Thu, 29 May 2025 18:59:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YVNDZ4EGMZ&cid=22882332.1753107733&gtm=45je57g1v9174149803za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211&z=1675873174 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 21 Jul 2025 14:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /click2?i=TONMNl833Io_0&ci=-4914782578322558011&j=rv%3Db%26ss%3D1280x1024%26ws%3D1280x1024%26wp%3D0x0%26ce%3D1%26ck%3Djc%26cv%3D9984%26cs%3D1%26fr%3D0%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D2%26rf%3D%26lo%3Dpush.newsvot.com%26mb%3D0%26hb%3D1%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%29%2BGecko%252F20100101%2BFirefox%252F134.0%26nd%3D0%26to%3Dnull%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D0%26frc%3D0%26dbt%3D0%26prb%3D20100101%26tz%3D0%26hid%3D0%26mq%3D1%26bch%3D%26blv%3D%26my%3D%26geo%3D%26mmd_ao%3D%26mmd_ai%3D%26mmd_vi%3D%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3DLinux%2Bx86_64%26hwc%3D48%26hrl%3D%26acd%3Dpmpmm%26vcd%3Dppp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D1280x1024%26wout%3D1280x1024%26wpof%3D0x0%26bcld%3D1264x19%26scrp%3D0x0%26scrad%3D1280x1024%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D53%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3DMesa%26vrd%3Dllvmpipe%26pnt%3Dprompt%26cnvs%3D7f7f7f80 HTTP/1.1
Host: xml-v4.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://push.newsvot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Connection: keep-alive
Location: https://installupdate.online/click.php?key=sit827ksvycclbejbeun&conversion=u8svSN7OM8U&bid=0.0006&pubfeed_subid=435368_739687_click-now-extra-special.online&banner=6820503&campaign=1624657&referrer=http%3A%2F%2Fpush.newsvot.com%2F&offer=3164080&request_id=TONMNl833Io_0&pubfeed=435368

GET /click.php?key=sit827ksvycclbejbeun&conversion=u8svSN7OM8U&bid=0.0006&pubfeed_subid=435368_739687_click-now-extra-special.online&banner=6820503&campaign=1624657&referrer=http%3A%2F%2Fpush.newsvot.com%2F&offer=3164080&request_id=TONMNl833Io_0&pubfeed=435368 HTTP/1.1
Host: installupdate.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://push.newsvot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Mon, 21 Jul 2025 14:22:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=2tqnuqg58n; expires=Tue, 22-Jul-2025 14:22:11 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=2tqnuqg58n-2tqnuqg58n-irvr-0-37wj-fnuo-fnfv-9cdf96; expires=Tue, 22-Jul-2025 14:22:11 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://mmentorapp.com/land_en/?r=Pushub_VT_Popunder_CPM_ALL_16_01_2025&sub1=435368_739687_click-now-extra-special.online&sub2=binom_postback&sub5=u8svSN7OM8U&sub6=522582tqnuqg58n50a
Strict-Transport-Security: max-age=31536000

GET /land_en/css/style.min.css?ver=1 HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/?r=Pushub_VT_Popunder_CPM_ALL_16_01_2025&sub1=435368_739687_click-now-extra-special.online&sub2=binom_postback&sub5=u8svSN7OM8U&sub6=522582tqnuqg58n50a
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: text/css; charset=utf-8
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"3258808edbac0b65dc36d9f25f824ea9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpKjiM%2FoFrbFkIlM68cp22pxfKAH7oxAB4mm%2FuTZAI5ubLtMN%2B3nuL6u%2BchOilvNv7kyDl1xYLl%2F8IXmvMgP%2FtKQHGVRcU2ex1rnPXHL0qTw2hsqgQxSi67%2FuePInCGwrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b595f4ed75696-OSL
X-Firefox-Spdy: h2

GET /land_en/images/logo.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/?r=Pushub_VT_Popunder_CPM_ALL_16_01_2025&sub1=435368_739687_click-now-extra-special.online&sub2=binom_postback&sub5=u8svSN7OM8U&sub6=522582tqnuqg58n50a
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"056f616c901a6650038a0efb2c8f5b47"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yx8s2EgrgT%2FNk93%2F2hvz6UF34whE9IaujXYxGrAPbOvRKG5Ax%2F9kjGk5jUivtWmQcz4Cy4IbfK5tDrI5gVufRsbXITtUkQW6RWIEKlIAigUmvoz6eXuuurm3%2BOZx0U3gkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b595f4edf5696-OSL
X-Firefox-Spdy: h2

GET /land_en/images/load/1.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/css/style.min.css?ver=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
content-encoding: br
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"df07f5d96d546cd7f90406e53ba574cf"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WAvH8uzNc%2FQYlJpItlVW4RIaIWPt6MdXYlaUX5sPkAfcmGtZnuecBew0gBnftiJBOJBNeN9En6zOeslC%2BVwMyX4fis4WzTxfT%2BZOuvc6Foz%2FkOIcCxKqs9R3U0g7PTkbr5WokNhc1HtoTHD4YA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b5961697c5696-OSL
X-Firefox-Spdy: h2

GET /land_en/images/load/6.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/css/style.min.css?ver=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"cda1b405506ff90d6100a4eddebc4cd6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6YXvYnjwWrubsyrPUFgXp08u9s3VJ39aEJA1%2BAafKCqrEqqNVlc3Jr6tG%2BpEk8yvlndP%2BpvKS6xsegIn8Ue50yFnpxtoL02dv06TC%2FOQgIROic6QHQIReGPvcoszjqPFOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b5961798f5696-OSL
X-Firefox-Spdy: h2

GET /s/manrope/v19/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mmentorapp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24836
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:22:56 GMT
expires: Fri, 17 Jul 2026 10:22:56 GMT
cache-control: public, max-age=31536000
age: 359956
last-modified: Thu, 29 May 2025 18:59:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /action/0?ti=187104997&Ver=2&mid=37d7d206-1b15-4398-9f01-08d8629d01ba&bo=2&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Mental%20Mentor%20%7C%20Your%20way%20to%20harmony%20and%20well-being!&p=https%3A%2F%2Fmmentorapp.com%2Fland_en%2F%3Fr%3DPushub_VT_Popunder_CPM_ALL_16_01_2025%26sub1%3D435368_739687_click-now-extra-special.online%26sub2%3Dbinom_postback%26sub5%3Du8svSN7OM8U%26sub6%3D522582tqnuqg58n50a&r=http%3A%2F%2Fpush.newsvot.com%2F&lt=1370&evt=pageLoad&sv=1&asc=D&cdb=AQAY&rn=216259 HTTP/1.1
Host: bat.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A747EADC3129447D8DD0EF89C798828A Ref B: OSL30EDGE0218 Ref C: 2025-07-21T14:22:13Z
date: Mon, 21 Jul 2025 14:22:13 GMT
X-Firefox-Spdy: h2

GET /filter?q=click-now-extra-special&i=TONMNl833Io_0&ci=-4914782578322558011&t=691172846&h=2 HTTP/1.1
Host: push.newsvot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Content-Length: 12981
Connection: keep-alive
Set-Cookie: c-1776808217=1724125239
x3332619=1724125239; Domain=.newsvot.com
Referrer-Policy: unsafe-url

GET /land_en/images/icons/icon-play.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/css/style.min.css?ver=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"9685b76ee80a1af6fd1d03202a5f8130"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ek4qfuMUDzUAYZVTXAD09vatLQ3UlItoZeQejyaHANUodQ36a5K1UYt%2F1kwpIJJhNiY%2FwEBZP1SuXIzvfIMckYfLLKF7BHPVKxmWw097El1mWWN8XrZz%2FTq4F1Stok17nQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b5961696d5696-OSL
X-Firefox-Spdy: h2

GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 14978
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 08 May 2025 19:07:55 GMT
accept-ranges: bytes
etag: "8077e3804cc0db1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 81E311B06E1F4989BB9127CDEA83EA06 Ref B: OSL30EDGE0209 Ref C: 2025-07-21T14:22:13Z
date: Mon, 21 Jul 2025 14:22:12 GMT
X-Firefox-Spdy: h2

GET /p/action/187104997.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: private,max-age=1800
content-type: application/javascript; charset=utf-8
content-encoding: br
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5176E01F07BA46BD820140DEA5397C38 Ref B: OSL30EDGE0209 Ref C: 2025-07-21T14:22:13Z
date: Mon, 21 Jul 2025 14:22:13 GMT
X-Firefox-Spdy: h2

POST /g/collect?v=2&tid=G-YVNDZ4EGMZ&gtm=45je57g1v9174149803za200&_p=1753107732603&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211&cid=22882332.1753107733&ecid=458480964&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1753107733&sct=1&seg=0&dl=https%3A%2F%2Fmmentorapp.com%2Fland_en%2F%3Fr%3DPushub_VT_Popunder_CPM_ALL_16_01_2025%26sub1%3D435368_739687_click-now-extra-special.online%26sub2%3Dbinom_postback%26sub5%3Du8svSN7OM8U%26sub6%3D522582tqnuqg58n50a&dr=http%3A%2F%2Fpush.newsvot.com%2F&dt=Mental%20Mentor%20%7C%20Your%20way%20to%20harmony%20and%20well-being!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1812 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/
Origin: https://mmentorapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://mmentorapp.com
date: Mon, 21 Jul 2025 14:22:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0
report-to: {"group":"ascnsrsggc:158:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /land_en/images/load/4.svg HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/css/style.min.css?ver=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:12 GMT
content-type: image/svg+xml
content-encoding: br
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"efa9c5247762797f37861e01948eb71e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lBdef0JQwBBSRqotQ15QjjY7VHitEnxAozCeXyv9MFrxmWhXXUTMJ39L2cO5jGRY%2BkzHP8pWwYVNo4pmwFMafJIqiz6yWWH1Phfa3tmmip2Dg1z4KedHHjjl47fkwhn5bQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 962b5961798b5696-OSL
X-Firefox-Spdy: h2

GET /click?i=dhhSotjfmiw_0 HTTP/1.1
Host: click-v4.mainexclkdir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Connection: keep-alive
Set-Cookie: x3332619=1724125239; Domain=.pushub.net
Location: http://push.newsvot.com/filter?q=click-now-extra-special&i=TONMNl833Io_0&ci=-4914782578322558011&t=691172846&h=2

GET /s/manrope/v19/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mmentorapp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24836
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:22:56 GMT
expires: Fri, 17 Jul 2026 10:22:56 GMT
cache-control: public, max-age=31536000
age: 359956
last-modified: Thu, 29 May 2025 18:59:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /land_en/favicon.png HTTP/1.1
Host: mmentorapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/land_en/?r=Pushub_VT_Popunder_CPM_ALL_16_01_2025&sub1=435368_739687_click-now-extra-special.online&sub2=binom_postback&sub5=u8svSN7OM8U&sub6=522582tqnuqg58n50a
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 21 Jul 2025 14:22:13 GMT
content-type: image/png
content-length: 1464
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "6db6ac918ee5cc11a0a276b8900d8f93"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lg66nbHp4pcqm7dSG%2BYWKKMqa84gAcfMgm6jwsCNLhp10dq3FV%2Fy9DP3%2F%2BMzeAGz10YG%2FVdfTC7S1N6MppGVZFeEv131nTXIef8Q3VmVNekze60QHRJgzuLD66frAXnmLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 962b59638c7e5696-OSL
X-Firefox-Spdy: h2

POST /actionp/0?ti=187104997&Ver=2&mid=37d7d206-1b15-4398-9f01-08d8629d01ba&bo=1&evt=consent&src=enforced&cdb=AQAY&asc=D HTTP/1.1
Host: bat.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mmentorapp.com/
Origin: https://mmentorapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 08938C0ECD2845C8BE636BC656CD0300 Ref B: OSL30EDGE0218 Ref C: 2025-07-21T14:22:13Z
date: Mon, 21 Jul 2025 14:22:13 GMT
X-Firefox-Spdy: h2