railcard.co.uk Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 25 Aug 2025 22:06:04 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://railcard.co.uk/
X-Cache: Redirect from cloudfront
Via: 1.1 25c4ddada43ee9ae5bc43c9e50b9e2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-P2
X-Amz-Cf-Id: lDQmD3iWJ0CTGwj8TNk6Dzl9P2qo0gv8ALiD6Bydi84Er74cGIbW7A==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
Content-Length: 235
Connection: keep-alive
Date: Mon, 25 Aug 2025 22:06:05 GMT
Location: https://www.railcard.co.uk/
Set-Cookie: AWSALB=VvJXjNO3UvZZKeDy8rMoYPa/YK3BdoGV6Mrg0No5tgXpOmywegRTk+sbbkp8VGLqZcCxO9kFuJrUCuopWj0ceLGDTdI8RDWeHla0z+i2s/Z62KltEDbIqF5c0Yzb; Expires=Mon, 01 Sep 2025 22:06:05 GMT; Path=/
Set-Cookie: AWSALBCORS=VvJXjNO3UvZZKeDy8rMoYPa/YK3BdoGV6Mrg0No5tgXpOmywegRTk+sbbkp8VGLqZcCxO9kFuJrUCuopWj0ceLGDTdI8RDWeHla0z+i2s/Z62KltEDbIqF5c0Yzb; Expires=Mon, 01 Sep 2025 22:06:05 GMT; Path=/; SameSite=None; Secure
Server: Apache
X-Cache: Miss from cloudfront
Via: 1.1 69c12e865b355b5185408e78aef8dba8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HKG1-P2
X-Amz-Cf-Id: kEkMIbKqS6mhH9u0pLvyIcr2VF7eS5s8sYYFLQ6XEwmnj66Y1BE8Dw==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 7930
Connection: keep-alive
Date: Mon, 25 Aug 2025 22:06:06 GMT
Permissions-Policy: accelerometer=(self "https://www.youtube.com" "https://player.vimeo.com"), autoplay=(self "https://www.youtube.com" "https://player.vimeo.com"), camera=(), cross-origin-isolated=(self "https://player.vimeo.com"), display-capture=(), encrypted-media=(self "https://www.youtube.com" "https://player.vimeo.com"), fullscreen=(self "https://www.youtube.com" "https://player.vimeo.com"), geolocation=(), gyroscope=(self "https://www.youtube.com" "https://player.vimeo.com"), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self "https://www.youtube.com" "https://player.vimeo.com"), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=()
Set-Cookie: AWSALB=pPjyrsURTDabrQOf5UnVI8qSoyoVpBewvUn/nWiUDUASs8XDDni8Igq/z2ylD8VIII3at+d4aqG25+ySemDq4E9MNlDhPcpfNfORzJA7FuensO+MkCaMzXckdGUj; Expires=Mon, 01 Sep 2025 22:06:06 GMT; Path=/
Set-Cookie: AWSALBCORS=pPjyrsURTDabrQOf5UnVI8qSoyoVpBewvUn/nWiUDUASs8XDDni8Igq/z2ylD8VIII3at+d4aqG25+ySemDq4E9MNlDhPcpfNfORzJA7FuensO+MkCaMzXckdGUj; Expires=Mon, 01 Sep 2025 22:06:06 GMT; Path=/; SameSite=None; Secure
Set-Cookie: RAILCARD=7rvakjntrrvug7h1srvvatcbmk; path=/; domain=www.railcard.co.uk; secure; HttpOnly; SameSite=Strict
Server: Apache
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: default-src 'self';         connect-src 'self' https://www.zenaps.com https://tagapi.brandswap.com https://www.facebook.com https://vc.hotjar.io https://firehose.eu-west-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://adservice.google.com https://analytics.tiktok.com https://ad.doubleclick.net https://js.smct.io https://bat.bing.com https://tagapi.brandswap.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://api.clicktripz.com https://www.clicktripz.com https://metrics.hotjar.io https://privacyportal-eu.onetrust.com https://pagead2.googlesyndication.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://region1.google-analytics.com http://ots.webtrends-optimize.com ws:;         frame-src 'self' https://www.facebook.com https://player.vimeo.com https://drench-design.involve.me https://www.youtube.com https://d2d7do8qaecbru.cloudfront.net https://ls.smct.io https://8341063.fls.doubleclick.net https://4087088.fls.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com https://www.google.com;         frame-ancestors 'self';         style-src 'self' 'unsafe-inline' https:;         script-src 'self' https://www.gstatic.com https://www.google.com https://secure.adnxs.com https://live.r3engage.com https://www.youtube.com https://js.smct.io https://ad.doubleclick.net https://analytics.tiktok.com https://googleads.g.doubleclick.net https://rules.quantcount.com https://js.smct.co https://lantern.roeyecdn.com https://www.googletagservices.com https://secure.quantserve.com https://bat.bing.com https://www.dwin1.com https://smct.co https://secure.marketinghub.opentext.com https://www.clicktripz.com https://static.clicktripz.com https://app.frase.io https://assets.brandswap.com https://www.google-analytics.com https://track.uniqodo.com https://cdn.cookielaw.org http://dev.visualwebsiteoptimizer.com http://connect.facebook.net https://script.hotjar.com https://static.hotjar.com https://www.googletagmanager.com http://c.webtrends-optimize.com 'unsafe-inline' 'unsafe-eval';         img-src 'self' https://www.awin1.com https://www.zenaps.com https://cdn.smct.io https://ade.googlesyndication.com https://rs.gwallet.com https://connect.facebook.net https://www.senior-railcard.co.uk https://events.smct.co https://adservice.google.com https://ad.doubleclick.net https://www.google.co.uk https://www.google.com https://pixel.quantserve.com https://bat.bing.com https://lantern.roeye.com https://www.facebook.com https://origin.marketinghub.opentext.com https://api.clicktripz.com  https://www.googletagmanager.com https://www.daysoutguide.co.uk https://www.google-analytics.com https://cdn.cookielaw.org;         font-src 'self' https://fonts.smct.io https://fonts.gstatic.com;         form-action 'self' https://www.facebook.com https://cognito-identity.eu-west-1.amazonaws.com;         base-uri 'self';         object-src 'none';         manifest-src 'self';         worker-src 'self' blob:;
Referrer-Policy: strict-origin-when-cross-origin
Expires: 0
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 4cf67b58b52960cded2156c06d93de28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-P2
X-Amz-Cf-Id: Kao-j6cJsUBWzyGSihZECiMtiwE3FuAzX_HDWxZoVsCK131O7x93FA==