tombola.co.uk Review

 N/A

HTTP/1.1 301 Moved Permanently
Date: Fri, 10 Apr 2026 15:18:34 GMT
Content-Length: 0
Connection: keep-alive
Location: https://tombola.co.uk/
Vary: accept-encoding
Server-Timing: cfEdge;dur=14,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9ea2b98fbdd41d54-NRT

HTTP/1.1 301 Moved Permanently
Date: Fri, 10 Apr 2026 15:18:34 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.tombola.co.uk/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: accept-encoding
Server-Timing: cfEdge;dur=26,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9ea2b9900e8fd4c4-NRT

HTTP/1.1 200 OK
Date: Fri, 10 Apr 2026 15:18:35 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Cache-Control: private
Set-Cookie: ASP.NET_SessionId=sto4khndhssomyvxx10cladm; path=/; secure; HttpOnly; SameSite=Lax; HttpOnly
Set-Cookie: TombolaGuid=d479747e-c783-4bc3-bfe1-042edd849d55; expires=Sat, 10-Apr-2027 15:18:35 GMT; path=/;SameSite=Lax; secure; HttpOnly; HttpOnly
Set-Cookie: tombolausersession=11a39882-b323-4dab-8a57-8381915112f9; expires=Sat, 10-Apr-2027 15:18:35 GMT; path=/;SameSite=Lax; secure; HttpOnly; HttpOnly
Set-Cookie: bingosession=; expires=Wed, 10-Apr-1996 15:18:35 GMT; path=/; secure; HttpOnly; HttpOnly
Set-Cookie: bingosessionissecure=; expires=Wed, 10-Apr-1996 15:18:35 GMT; path=/; secure; HttpOnly; HttpOnly
vary: User-Agent
x-content-type-options: nosniff
reporting-endpoints: {"group":"csp-endpoint","max_age":31536000,"endpoints":[{"url":"https://tombola.report-uri.com/r/t/csp/reportOnly"}],"include_subdomains":true}
content-security-policy-report-only: report-to  csp-endpoint; report-uri  https://tombola.report-uri.com/r/t/csp/reportOnly; script-src-elem  'self' 'unsafe-inline' 'report-sample' https://*.tombola.com https://*.tombola.co.uk https://cdn-ukwest.onetrust.com https://cdn.optimizely.com https://app.optimizely.com https://www.googletagmanager.com https://www.google-analytics.com https://flex.cybersource.com/cybersource/assets/microform/0.11/flex-microform.min.js https://ad.doubleclick.net https://applepay.cdn-apple.com https://bam.nr-data.net https://js-agent.newrelic.com https://static.cloudflareinsights.com https://ajax.cloudflare.com/cdn-cgi/scripts/ https://secure.adnxs.com https://bat.bing.com https://www.clarity.ms https://cdn.taboola.com https://trc.taboola.com https://connect.facebook.net https://sc-static.net https://cdn.quantummetric.com/qscripts/quantum-tombola.js https://unpkg.com https://assets.comcarde.com;
content-security-policy: frame-ancestors 'self' *.tombolaarcade.co.uk *.tombola.com https://app.optimizely.com;
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server-timing: dtTrId;desc="4fe7d4f9b1eabb5e26ef09fc3fb4eb9c", dtSInfo;desc="0"
server-timing: dtRpid;desc="504029714"
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=23,cfOrigin;dur=1419
x-oneagent-js-injection: true
x-ruxit-js-agent: true
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Encoding: br
CF-RAY: 9ea2b990fe96b96d-NRT