The URL you tweet should match the URL that is whitelisted, which should match the URL in the twitter:url tag.
Right now you’re saying you whitelisted .com.
When I visit .com I get redirected to .co.uk, and as a result I copy/paste that URL and tweet it. That doesn’t match your whitelisting.
Finally, the URL appears with two different TLDs in your card metadata. You should only have one.
Make all of that match, and see how you get on from there.
If you expect to see an image, you will need to put the path to an accessible image URL in the twitter:image:src value too.