HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=240f32694cb191a934d5cdae956d2119456320e0-1767711706529-e249622a1cf84da730a435a6; SameSite=Lax; Path=/; Secure
Request-Time: 5
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Jj3gQsPc+WgJXNo6oJS5kw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 5cf26f8164e0cad37f6634ff6aeac4ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: A2Oa1m5mdpqJs5lFzi8MPjNUq5r8EVyDesVFBj1WpSsffcuDm_XFWg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=ede4e19cbebb3d46401d908c2685b184c7bbb501-1767711706679-1875aab8625322b70cd8efc6; SameSite=Lax; Path=/; Secure
Request-Time: 8
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-YEPDo+AtS+/AewXjowQslQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 7dbea139a5c4f501bc4b0e9d19a50c9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: oD9xv9H5vWaoePBPui_8usc14pZ_JhOYfmP-QeRjOAoEB2SKfHSdeg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=42901aebd36a5ad595d4b016df11ee52fbdf9751-1767711706220-f65ce2c37329482e14907a8a; SameSite=Lax; Path=/; Secure
Request-Time: 7
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Shiug0QQHJm8Vkj6wWPCIQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 79a075303cab256e952b4b0679e1182c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: WeskB9tJ9ohkkVtQuyD4l7kCf_XnbPAjVa5_csZgPxEuhHnNtXJrXA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=7094c1e99dc6e8d25e166c7404fa25296f2724b0-1767711706699-4d5fd6f1062cf4fe377aff73; SameSite=Lax; Path=/; Secure
Request-Time: 12
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-dUIDt4jHYCGbRj5sPRHrdQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 bd96095bb3c15c742ab4d72d1fecba6c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: WJtGb76_PGRNe6NCn3uoZrzbUwW-QxHsK9hRCMCX2ln3GCSh9bN2tQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=f30b2da52aa9bd6d2e587f5b8af707f35c86e350-1767711705875-f41713158db8fbd39aa49669; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-TVTd2ccuAbxqdg7wUY9PZg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 f192553c835240a9b5df520fb7ffd876.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: iB6MyB5AUVC5pL-NoAwNK-0Wt1hIS7EJNgsOhhAm8gnQC0fkevG0_g==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=784c3c2b6792b41b2841f254b4c20d55e1808a0b-1767711705967-f9d9047c07d24ef3a93be12a; SameSite=Lax; Path=/; Secure
Request-Time: 9
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-sP4FRUJTY82fTJJX9qCAUg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 f192553c835240a9b5df520fb7ffd876.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: f_M4nizwfrqdMEgVElt06FCQIf3vJsgOh9JbwHkJyKdqM-8dujtAkw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=02da99ac2b77aaa56d9df66845bd213ead49f752-1767711705808-dd584a574514eed45db59b1d; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-byqTnRIp9W7LSgENqDvDeg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 934815569b3b6127560be81f148ef706.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: lcrsHHmKJCezJasdAWUEigA249fu0NcdVmA5oaGyWL6sSfT_fwPTyw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=dc1c4b79f2c8bc39982146015950352538846856-1767711705926-e4ac8a3b6d5ff6a93fa8d68c; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-XKimEjOlDSnS0iGRMq4B7A=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 62e2e45895008240d70f26081269c850.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: OBc8aCDpKeFYsrpxqu6s-reO1yuU2qvESQccPUxDK7GCFQc-cvRDlw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=67e710c2d3ddf34223990d15b1a924cbb65bd8b4-1767711705856-c1f29d1466287113636eeefa; SameSite=Lax; Path=/; Secure
Request-Time: 5
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-J/LzQlIw5GW9+XODcqNbhA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 69a82a9746d3a7343dca651e0829f000.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: pf-TyhZUZAvABX8GSDGK-XBoipL4mNLJfBeKATBCTIDNlwgSfYgxHQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=4451acbe6916ea91a445baeec230afe4f4bce5fb-1767711706247-b7b1d4ea0aecc2e6bd20e71f; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-3orhZOuRCQ11+X6z/dTCFw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 69a82a9746d3a7343dca651e0829f000.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: yHSJWHTNiEu83YqQFnga0VkBOLrpwBuErVMYDWgWOyH8k51wW8HLJQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=3d55b70ddda42be74061b2de0bebc45683016338-1767711706478-326c3dfb5870dfcdb1d096ee; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-A4tL/IHMo/sHR7qUOvu0eg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 0254a3d4b384cab4933ea28efe6685c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: fA_ZCnXyXgHzjFk7jKrbgocdqrZ6b5Dtp8tkLCFGZn_IRYryLT1mqA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=52149dfa716f761e97b2c8528cefacf307e32771-1767711706424-28b6b7999b88342208140d6e; SameSite=Lax; Path=/; Secure
Request-Time: 6
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-PE6SMqqp3nWbIDZyyIxgug=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 d147b4a7fe31d4e8683f7d8b15b71906.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: THT6Ac7a120sfyu9MhYvnWva3l8-HrEZHvqwifIVbI4jbYhp8DGKcg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=0477c7506fcb201e4f7901009c1e303da6f29b2d-1767711705826-8918f16742fd7ea3edec1caa; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-fFKFey2fXoMSXMIE+fuSFQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 671c13f54b1ad36c801a07e5c548b1c8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: dMocCTgPHYutkOyQFbRJ6D2iujfcsexKkZOWsatadJacpUYGE_vcqA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=5643e6bcc06ca5d92dee87fe55183184e21f83de-1767711706346-30d931bc6c304b9c78357413; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-gw9sLPsidk+kuhFlenjTbw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 9bd86598a7f45cc948aa2f9674ece0b2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: jnELQCLMT2DQJTmifH9UDfow_ubtfCAJcfl0NwI0ON2M6tCqcL6BCg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=c8863c85a2e0bdbbab7e44e40918bb1aa2ffceca-1767711706144-92a36b11d609d132175dab6e; SameSite=Lax; Path=/; Secure
Request-Time: 7
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-/9rgjgescu0L+DERKK2NNg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 6ce3814cb60a4c907ac701e60e4c1e5a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: sFJnJxjLtAeQGupykzY841ypR7yECe1b56XPcEvucUoJ85e0yvrKNw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=75d57960d9ff09c23bc457aba60d289487dad997-1767711705823-45f4a1717e2cbf20c19718f9; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-FoVucxpEZrYYf73/MfCDUQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 671c13f54b1ad36c801a07e5c548b1c8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: 7gSRxB_i5iOHZxgF0ZxrkH4LBLc8TOR8xQjzyUOFcblZNvH3jq7Pjw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=b589904e8c7b48fe0f1b5675b7ae98ae1c137ae3-1767711706197-045fa1ff20e3c8abe3fb9d81; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-CeIiibnSc7+SygMf4e1YrA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 e505058447bf5e74cc264f4e72f27bee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: jY5f-zgDeKV6ZPS0vUC07qyVV9er9u1z-5HnPpKgTUJNu2f4X6CDzQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=46a01613d90075734e2883d0832db62ac0ca291f-1767711705743-64aace0e4ca2e003a1e613ec; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-6qh477y78HDvk+dEniK7xg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 79a075303cab256e952b4b0679e1182c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: ZUiYZp1_pu05AP-yEaBa1rhKKh3UhNSvO5ipCnRUbubrpM4pzk6V_w==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=edc2d5070d78b515a3f14f76b8632b957d22edee-1767711706120-68c5724dad2411c68532e332; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-ffw1aQGPebzI1NfUq3ww9Q=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 b99111dfd026a3c99d0e66063beb0544.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: 4fbXMLAWhQaC5UbTOaYY4j_iBXIo25AOtduQciWKjcNASj73FLZ3eQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=9c9be00e401175ee6d0c837c9359275fa9756b93-1767711706438-0933e1eb48ee040a8f2be026; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-b3PwyFRJS9G+fkasNbta9w=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 7dbea139a5c4f501bc4b0e9d19a50c9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: jbRoZQZ9o3nfW9RcRfUKw5Ix5JcvpOy2Xc_kBlVPXhwW6CfSUiybog==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=40740f3403b3b24168f50e3bed593afb0d27a606-1767711705762-f61da9b62a38b8dab4d225e6; SameSite=Lax; Path=/; Secure
Request-Time: 5
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-5JfuLh2ZDjKzfsWURk+A7A=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 7dbea139a5c4f501bc4b0e9d19a50c9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: GIcGR3gi4ahqI5iHQnunD9pd5nOG4Td6AuhcFIz65PInoAM1CTfRmg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:46 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=fb0adf4f92ed7ac8dae1b4f634ba802869d5cc14-1767711706067-bf6b75d12f2892f737733dec; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Y+z3cHb859a1QEymla/0FA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 98559aba51e0c88c6e74c88152fb63ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: sUlOkdte4slI8oUqPrPQCrTQIzyNkHpRsrvuEtImElUTIgo8ljU1sQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=648e045a9412853279ac548b7797bae17f886e05-1767711705669-4f3ef7aac4c6ab5464d52d47; SameSite=Lax; Path=/; Secure
Request-Time: 7
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-sU0ZLwye843ytRFQy2AGJQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 b459d8cae3f218ce39711fc3ecdcc998.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: P9RVCH5AxcbUOO85vGsnmdR2bgiJB3PSerwXLzvpyNEFmM_7JWShfA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Tue, 06 Jan 2026 15:01:45 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=353114d8fe38dcaa30ace3d254069abed99a3a71-1767711705672-4e6d91ca4f0a16b17ee81735; SameSite=Lax; Path=/; Secure
Request-Time: 6
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-jM7AXvwrAzV+PzZmmxsN9A=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 bc841916063a49c638b48e73f77a28e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P5
X-Amz-Cf-Id: QYPOxkF2MtGG8y0cMD1758VK1ADAsTeftdQCcC759Yv3VRE-lpowwg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:05 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=489b2115fef0b6ea86284db75c927dfa67d40f03-1767175925128-d48bfd435ded1b954f57a81b; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Bmzzg0N12qz5OU3iVcTCig=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 11a78ce92a548aac13fb6ee545aff014.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: LgnviuLyfQ8bYV5o0_Jm2f76lORbHHuie1kelxvoeUjpzxylrJmmww==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:05 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=3d0ddc09c3d0bd867eb93f9ee3d9ec965acd16b3-1767175925385-d36312e488c535c36d5a7efb; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-urNR3ga+l3EpI4yMICva2g=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 23e8ec14db0917c91c2c733b45578890.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: _R8RmU8uLDG-lQC0arZp7Gjdt0g6QHZGyOheG-YjP88QNxatHVwYsQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:05 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=48472a7be1122378f9a14370f1827292a1142891-1767175925320-9bbacba9abdb66f3c8705b8f; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-K4PRZM3bToZWwtl3jhVFrg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 5fa65194b963365c20fbd28444032cfc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: YXdn9Bj2S1w8dpqwzzMlQbQUtTX6i8dccGTPH-LrysK7ES62Qu4Xyw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=2e7e4e39cabb5e0dc4ced121887b0bb776cf7269-1767175924974-38b6b7395dbaddeb672e3803; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Hug/XNQFbryhaF5K/LFFYg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 490f651effcacfa7d80143d3047d794e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: BhUJajFlsqlYo6g58ZqHgWvX1H5alcJmLgNvD_TK-0XvQEgagbAp9w==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=ee669ebd23492abd7b3476c35e4447cda2b8da86-1767175924300-2f717d5b2058eb503262747d; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-K5v/B37NE80oBOQQJQPh/w=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 df3b3b9f4fa0f79195c56a91cf242364.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: aG7hQCkFRtFqCaXHqwoKtuC8A1gAbyjW3SItGxHLc0Ay3-03-pasZg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=50e4011630b3ee1485cedcb19826cbe2bac27967-1767175924312-3f73d6a9f65c9fc287b22846; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-C8H06DVmPlp+/ieArfVw4g=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 6fd3ab2be93b19c970fb371964d46d94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: XCBHB0sDlgXDNzX7GSixmBxDUjFrSX0Q35MNSRpWe9SKz-C7-F25-A==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=ea83591d7be354a17910717173aa6fa3a364e6ff-1767175924246-6d461c6787c1c1379f121ed0; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-fzoB5D7XhRq45OVHBDfgzQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 5fa65194b963365c20fbd28444032cfc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: UMKKQBS7t_Xn3AMq2M-S4IrD5bXA_ajlbZe_DnEbAx2e06pqEijVQw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=9af5d772f93da7a6f8478ce54c67efc500288869-1767175924045-6e83939ca5712be6b57f712e; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-QmwO6xaQU3slgirmLxsE7Q=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 9ef1b108656dc6d0707b168b862883dc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: GJL5OQzuqA_XPTKcxm4gNum8u7jgzqaklZ8_RSiGCUBb_dZATzULyw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=2baa27a47986776bf4ec90f5e89a154289e48a22-1767175924861-21abe8a326558c0bea086723; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-U/yk1DuGamANfNSAAu7FJQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 bc0a0f9f99d36a68240a31a25e39addc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: FMcYWHq5ALL1XOATIMMBeGZ6yyDk4b-nIKJA3Og7fie5RJjNixf8Qw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=f8d41773e20c0dda1f8d4e2ced55a3297a611555-1767175924526-fffbfedfc594c6399193887a; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-6kPY8X1ZxmDPXUGFSLSDpg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 6fd3ab2be93b19c970fb371964d46d94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: BeQt4VDk4e92Q3J-B99UllRAHTdLyQDYIpC2r5EFk0azk0Xg7Vixog==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=cd880a5ca75ea6e36fe30e7cbc88c0a47aeabeda-1767175924522-69de40060ce5311fb3a4624e; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Mhr8KXgG8vdg+sQd77A/Fg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 11a78ce92a548aac13fb6ee545aff014.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 7i90tK2468dj07gr97aS9z1gI5dL3ytUhzH8gtnpbyxeZP26Ku9fOw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=8a1877932c71b9d0d6fb82f7445a80dced3cabb4-1767175924160-53acbb4cab4345d98f1c042b; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-I4z9jmKYXtkfao7iMj6pyg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 91353a8aba9ab05d79e9678e004043bc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 9AfdoD9PE738odVCrnG_DEEPmsF67zs1cy4WlPZ-e1u0kQ6cfz28vA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:03 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=5139f044f1586f274dadd5dc7d9cad04a9ee5b24-1767175923978-55a0bfe39817507a87f173a2; SameSite=Lax; Path=/; Secure
Request-Time: 8
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-rhRDdgYjk8uKk1TIXNAW0w=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 d7433132a7c6595c9aab2dc2272e7060.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: Yp5666CpMIn8gURSZszfawU6EvXSZB2XdUhi5f8XIih9Iv4-aW_N4g==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=b6e54672d3f7cdb170b38b5edd8136234c72ec93-1767175924041-bb4512b39012cdf1744a958f; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-9UfRDBlHy4IWBNa/DIQtGw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 a49c26e403f2dac09629dceb6dac5740.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: DUwQSs_A7eFGCU_B4DZIYD-Km0wQvS_dZoboAWmzrpTWveK3A_UWZQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=f4dacaf5080076afecd94c758063e2167e51c175-1767175924032-a474c06e1be0c150b7e3fd2b; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-RQorJayN5OTOZ6GQWxDwOA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 5743d3ff81b625f69ad8b8e32fc9c412.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 70NouLRg7dWKCGWJi_h1TXAmQ7Q0Q2iSaW_VpFlr3fTl1Rd2Wh1A7Q==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=67ca8667c10d770ead5303ec4486db9ebca49397-1767175924654-80a0aa426c299640ff10e678; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-2bMXlB215DruWfHDlKoSuQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 6fd3ab2be93b19c970fb371964d46d94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: bih6z6EDub1aKLeTPx-jDmQNIoQy9J7gTHWoG8TryIZ7xVW2hRDppg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=d6c8a5031d4927a47a09956ebca92297d7429dc0-1767175924069-e543f6be6c7e0a69ff2f6d0a; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-AxgmnovwRkqx0PPvYxFt/Q=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 6fd3ab2be93b19c970fb371964d46d94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: lyQMIRh2xbetu3cIS4Lr0ney0zAwCGfYADtiEbcQg6lxFX_VnzRcJQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=9a6248755986bbcd6b9e535a4f1b393e9f90d47d-1767175924303-6e0a29e10f0f741c7eec6f36; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-szlIoYJP2mDqHy1MpHb+8g=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 91353a8aba9ab05d79e9678e004043bc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: ox57bOMVKyDEgzEhakHtN8dYjbSTUAGrK_gC_sGMt9wEOwofBHrazA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:04 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=4185aa90d453f507c0a8bc7be849636ffe3d8cc1-1767175924083-097109608d56653da1546ab3; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-eLp6Feqeb0fmHFEXJq/mSw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 857b0dca772798c338c78a1be69c955c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: ueGKfZUyd4SGtVsIY5VHJksi41kLIL4-MpdAJdnfmyJD1gMFdkBrSg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:03 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=7c17a07c0651aeca97c157888312967befb3f980-1767175923948-7ac2b71a78f4cecb0b3e304c; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-HBiW81JiCJNj61ZS87Y6Kw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 142ded88048f806cc40a5a225130cc8a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: Pwrj7iU0LVxuHawuurSRZr9WPZPQUYlvStrhh3ApFSSdHyqE7QzMOA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:03 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=1d588c10fd887eb2dbac25b2abb5a20e2c4d0a49-1767175923950-e0d302aea3c50170b924b081; SameSite=Lax; Path=/; Secure
Request-Time: 17
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-heXqQSFHRvml2o4hJDzrsw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 fd4a8fa7c304171992e7f22fc8894904.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 64NnvOzVG4o8fKBBg0F59fxRyhNXLI93A5xu8Xhk18INfLbEMVDYxg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:03 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=1ca9c185b481a6c57d53bf7469d06b768b747416-1767175923865-f6a52e7afbbb239f61582e6c; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-nbd7og1aiEH/jn8LpGGBMw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 0dec5f752f0f332c449471a83f050dd2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: ceCbJsY0rztt2yjfsTzE3ofh8GpfBp4Ns1HLbeYYfmRC0-oFNniwYQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:03 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=ad188d9640358a1842346fb7ab1f6c46e3a2a33c-1767175923952-8713505f15a7909630eb49fd; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-cTwdxJI5mBQIBqy3cO4jRw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 0dec5f752f0f332c449471a83f050dd2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 0lwo-9a9ri7gtfo_A4-emHMPjcpppvveM8-x6la6nlJp1ZSHYdKVFw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 10:12:03 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=eb8fa051910e9ff7dcfad06ba8276c3e27e27412-1767175923927-ca2690d14f510838389edc7f; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-6VrWE5BPDB0vP7w6rCW+mw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 bc0a0f9f99d36a68240a31a25e39addc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: p6etYWWSAoEsvV-ViH5nvLkEsPaGBsqxS26WKqc08wmWsz8MV_1X4g==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=94e9028e5f9d1c6aae6cd396cedc9b12a4f716ac-1766366171431-b3e360e55b36daee6f316ad7; SameSite=Lax; Path=/; Secure
Request-Time: 5
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-N5fQhd+gOTtjpFqWOM5OMQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 9ef1b108656dc6d0707b168b862883dc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: PGBohmOFULik4rrhl05cAdIVyfIfvVU5lhyNq09qe7jXoEirZbA2lg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=61559e9e210dc6b997b8844ae03be408f1772d66-1766366171494-8f129eff1040cd45a3408faf; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-j324Aynz8kvpAW91+9/DoA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 0dec5f752f0f332c449471a83f050dd2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: eiZ2s5ttuub7mKKZxgosJv_W5WMNdNlg56LefLT0aFj3Hkw_6FMsVQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=dd34e15e9ba4cd6786f6ee4e0a197a2960a2222c-1766366171408-de76b95446ed27e71a2d0b57; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-7A1XaXSYBceT4vLeKgiCkg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 8eee0c5143f92bd7600d25e3dc25ce5e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: t6mNRCuhOr3wVlnLYZMtxJTwCpQG7MDY9Swfqa0xO19B9iuqGTtBHg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=9f30fcc921aa812dbc901975ae52ef4d78b0e3d4-1766366171381-567e36bc1d71a59c4efac6d2; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-fNbBTAGut1xvRxx99urB3Q=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 a49c26e403f2dac09629dceb6dac5740.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: n7A-XRUGcmXnYa72Zia_X1nhqxDfWZYoDoRn1GiqE6B1Bnb79WGo6Q==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=00c06818e78364b55e628a78a97c4d1e02f9c877-1766366171354-00da3e654da983fa89ee7160; SameSite=Lax; Path=/; Secure
Request-Time: 5
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-6Ja/AfFV7gwwxsUayLQklA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 00746b020527dcdbeca0dab6f6de299a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: hJMeU8Lu6O7yPwh3KwKElwns1yeqLFjPdAE7mN6sTg1_USBvbwqduA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=d28a6037b455219eb15d2accea511e3b23b215f9-1766366171141-a4138271b098d626cab01a63; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Ytz+O+FjGT0E9OYUJ5Xtvw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 06a27d66e25d02ebcfb014b9d194016a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: hDtdEu5OWUCEfvfoSHFkagAOrXQ0eKN-s-Ceh4MMydpLN7Dwxn9Ftg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=fac470c2247296c9af7731903f9662336cbf36b3-1766366171153-9b8a76f83e197e2980bfa9cf; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-ASATCrZkzzGprqUlsU5Lng=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 8eee0c5143f92bd7600d25e3dc25ce5e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: UX8didoh0O90oyOciOx0L3WV5zfUSdsD_8X6RUUr1S57hhO_NYjN2Q==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 6795
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=b667f8eda008fd4ecd3281c78cc8e5e04e03f8c8-1766366171139-244a072488ec238d7639138d; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-4SH6gP/M45AL3whoBIiATA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 adc51edbb4dc468fb382e40b115a2f62.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: NZ4Z3KNgoW8q70JNAoDwkxPUvzku_Ew6P7vL5i8w11G-QyCiGyxXkA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=62f06c574ba9615426cc626f1fa235883bef2bb0-1766366171132-b3695c81b8d9989de4851099; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-8p23x63pSbA4/2mEyGbPow=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 b3fce8903671f8346e7a6a138d2d4610.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: wnsZe-yHkdcfmV6Qimpw3CwWBpiGnHFpglazM4zod5iejEhGMEVvTg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=3bd210ad3a115ca478d40010cfa1e2e26acf6d31-1766366170817-b14ce9fd0eb71afe1e8ba6a6; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-43WV4x+vgRCVv7vmci5B2g=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 1877c1d3c1c0435e896415d580d52c52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: AKfyANtzmcjlIlNpOXxHxcu37xpav_nUcRzkvXGrMziNWVmzgjcMag==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=1eed86f43bce235de3ecf5fe518bcc6ca385f597-1766366170789-8d46227d90529fc161b8cf00; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-zsoR19mdNC686SLi8gnxnQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 a49c26e403f2dac09629dceb6dac5740.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: L-rSletYq9Y3zQktb4yYUz6cmRSKCcj5FU0NCp4royoIEBC83TnQvw==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=e5c953d1b944436984f7abad665ba0fb03691745-1766366170770-b8ef52d72356066d198d3a8a; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-y4h99obmK304J1+LFO5RRg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 0SW82FBZ7uTOZaD60NgYR793G4gTTZ4AmHQcJpJFbeisGsUNgPTPCA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=905a4962b5998cbb64616b2c76c0a5a2e7ddc68e-1766366170995-4fe098e5a1c7a8be7eeaabb9; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-1znY4nf0r/o2lRrd7xMT5A=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 adc51edbb4dc468fb382e40b115a2f62.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: tRZUhSbgdc5M00whKCLZSj2x7b-iN6Nrmlf0MfCLi_lKwN4p2ebGog==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=1fd0deb3fdc4e36276f151dca8a79e33de0d307a-1766366170892-a8f97acb9dae6e0035a892a7; SameSite=Lax; Path=/; Secure
Request-Time: 6
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-GlnGJ1lqoHwpoYnufXL7mg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 0dec5f752f0f332c449471a83f050dd2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: FxrA0EZ-_AJHdTe295s_qBo-9bwngnWqwzOQWsEAEELnVh4eCCSbeg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=0b326f9ea0b07d857b93e24578ec698cdc1b4a32-1766366171012-619611428d93b76fa139911c; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-l1CC0y7PPc0gtEIRjvkMzg=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 0dec5f752f0f332c449471a83f050dd2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: sL3_6UGMigxBjoeqYTEM8DozFpA5K1l_Q4zMgnLK1pg2KgiCM8DGEg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=b21841028ede971aa1dec26b028f3d915c504f5f-1766366170617-9f1cc044f61649487340dd5b; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-IF9zT851IakugYkRaX9zIA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 06a27d66e25d02ebcfb014b9d194016a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: lNKLhXuWilbEiXkjFsvmnJXmyV9mRh9KuTmXVQuiMrPLdWWbHAC2VQ==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=44b4c6735b914f3fae29df25e0d6af1d268727cd-1766366170732-df078231c42837782c76c4a0; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Xe+W+vB38/irBwktesQ88Q=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 ec85113c6ed859938b3fcfa19bc035f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: XmNASwGQcbDZTW9_SbY3IQvKh24JmS6CX-u5SlkNX3ISwTyn8RLVfg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=74ea9809072c71ff02ec2b9a867ffb262924bb75-1766366170980-e5b5f2cff92ce4f322f7adf9; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-EpSAi2qGdOH2Okp8+erSdw=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 8eee0c5143f92bd7600d25e3dc25ce5e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: O0_IvW8TtFAEutI9O5xQYDARekRK0A5WjXfA2vl-1_ZaWRIWYmdfRA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:11 GMT
Server: iterable-links d881
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=9bab4194fef34a95316ede3428b69f3aa0a5fb8c-1766366171156-6091eb292a79e16790b76a04; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-02MlaP00BY+HQgmGQIdTnA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 55gMUC1YVukpWXkDD4dSt02BEn8hVPEwJlH_juGl0D9ThLgb2bg59g==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links b20d
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=f21b5c30c256537f4bf2fe77b6d4a70259bf26d7-1766366170680-8ab03dfc7f840fa9b2b7cd5f; SameSite=Lax; Path=/; Secure
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-8wOtfuxFKhV0RHq7OY+h/A=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 fd38301adb0ceb6cf6c42567f371a2f4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 6nMhNeRLK8eT_JR847aPGfKjnZt9flg2scNhJucq3SZ0Cv8NYfrINA==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=2d5b850fbeb53de7f95801caca891c92339e4f52-1766366170692-152e14ff99d400d819191dcf; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-Ckh6spgKr9VRXqtYm/vI5Q=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 cb0a9b0d01a1b0cc9278d9875ce23c92.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: KgrKoF1iQdB9JcUQgYG_Hj3EJqhwKaKmKY4t50iJr-cPAi-2K-QDJg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 6e77
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=20c41f164e0016b9f0ef21a7513715c1e0c640e3-1766366170889-e3b45b4a19350e9131d6db52; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-nZlX2qVU9QeUxUI1G+k82Q=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 0dec5f752f0f332c449471a83f050dd2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 6QCBkW86f1FeEQA_vYdIZHxESnCfavYlG_oyEydS9JIyczNo7gFQcg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 08b0
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=fc9e90a19e51b5177a9ba92bd6e0dc6715b7581f-1766366170871-8331086c3746739d80bf6e76; SameSite=Lax; Path=/; Secure
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-ykhat4W8KBC2BFZcU2z9sQ=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: HXfzhFV0RzqNVIPYs3NnGX23azzeBcDT8DZ5tnntVQRlGgr9qb9PFg==

HTTP/1.1 303 See Other
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 01:16:10 GMT
Server: iterable-links 15ed
Vary: Origin
Location: https://tmcards.uk
Set-Cookie: XSRF-TOKEN=617ba3f8aa70d40a034f26dd2ca88237d93cf3c7-1766366170686-07702181bfa9caa85e1fdf26; SameSite=Lax; Path=/; Secure
Request-Time: 4
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-cK1jkEH1Hn8t8z1v8vNUaA=='
X-Permitted-Cross-Domain-Policies: master-only
X-Cache: Miss from cloudfront
Via: 1.1 857b0dca772798c338c78a1be69c955c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: pCXjLuYu66O3QdIb1jxFQXM42CK5e_daJkqIJ2JUaNZW9LiUuU7mng==