Hiya - thanks for the reply.
There isn't a timestamp on the council photo, but I imagine it was taken around 11:52/11:53.
Unfortunately, my phone's browser history doesn't tell the full story. It looks as though there is a long period of inactivity, but that's because MiPermit redirected me into NatWest to approve my new payment card, where I spent several attempts trying to get the authentication/payment process to work before returning to MiPermit.
NatWest have confirmed that the first MiPermit card authorisation they can see was at 11:52. I have a screenshot of that, together with a screenshot showing all of the MiPermit approval requests (although frustratingly those only show the date, not the individual times). I'm certain there were earlier attempts, but as those failed before reaching NatWest's systems, they don't appear to have been recorded there.
I also downloaded my Chrome history from Google Takeout. It's supplied as a JSON file, so it's not very user-friendly, but it shows the browser being redirected between MiPermit and secure7.arcot.com during the payment process. From what I can tell, secure7.arcot.com is part of the card authentication flow used during the online payment process. I don't know how much weight that carries, but I've included a sample in the evidence folder here in case it's of any use:
FML... and thank you!