Tenancydepositscheme.com - Custodial.tenancydepositscheme.com

Cache-Control: no-cache, post-check=0, pre-check=0
Content-Security-Policy: default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline'; script-src-attr * 'unsafe-inline'; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; style-src-attr * 'unsafe-inline'; img-src * data:; font-src *; connect-src *; media-src *; object-src 'none'; frame-src *; form-action *; block-all-mixed-content; upgrade-insecure-requests
Content-Type: text/html;charset=UTF-8
Date: Mon, 02 Jun 2025 00:48:41 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: /home/
Pragma: no-cache
Referrer-Policy: no-referrer-when-downgrade
Server: WebServer
Set-Cookie: JSESSIONID=F3D5BB1411C77727C4DF317C0BB1ECCD; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Content-Length: 6
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, post-check=0, pre-check=0
Content-Security-Policy: default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline'; script-src-attr * 'unsafe-inline'; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; style-src-attr * 'unsafe-inline'; img-src * data:; font-src *; connect-src *; media-src *; object-src 'none'; frame-src *; form-action *; block-all-mixed-content; upgrade-insecure-requests
Content-Type: text/html;charset=UTF-8
Date: Mon, 02 Jun 2025 00:48:41 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: https://www.tenancydepositscheme.com/
Pragma: no-cache
Referrer-Policy: no-referrer-when-downgrade
Server: WebServer
Set-Cookie: JSESSIONID=3239DC26A74C4245A050BA41415470E1; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Content-Length: 6
Connection: keep-alive

HTTP/2 200 
content-type: text/html; charset=UTF-8
date: Mon, 02 Jun 2025 00:48:42 GMT
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; preload
server: 
set-cookie: PHPSESSID=fmg2to33m7ve5r6d4dufo0jiqb; path=/; secure; HttpOnly
set-cookie: TDSKSignature=b87f9d0382b183c2117b08dd3d9f16ef07bae202b7bb338f90c6f0b3615e5aa5; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
link: <https://www.tenancydepositscheme.com/>; rel=shortlink
content-encoding: gzip
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 0dec5f752f0f332c449471a83f050dd2.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA60-P1
x-amz-cf-id: BY7RNk0ptW0uqAcTDEidgX9qhUFT1cmUQ9aN39welBsrAU_zbMsBCQ==
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self' *.tenancydepositscheme.com *.thedisputeservice.co.uk; script-src 'self' 'unsafe-inline' *.tenancydepositscheme.com *.google.com *.googleapis.com *.livechatinc.com *.landbot.io *.vertical.plus *.gstatic.com *.livechat-static.com *.firebaseio.com cdnjs.cloudflare.com code.createjs.com *.google-analytics.com *.hotjar.com *.bing.com *.smartlook.com *.smartlook.cloud *.licdn.com *.googletagmanager.com *.doubleclick.net *.ads-twitter.com *.facebook.net *.tiktok.com *.outbrain.com api.swiftype.com app.mailjet.com *.dotdigital-pages.com elevenlabs.io; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net fonts.googleapis.com www.gstatic.com maxcdn.bootstrapcdn.com *.landbot.io *.hotjar.com; img-src * 'self' data:; font-src 'self' data: fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com cdn.livechatinc.com secure.livechatinc.com cdn.landbot.io *.hotjar.com; connect-src 'self' *.googleapis.com *.google.com *.landbot.io *.livechatinc.com *.firebaseio.com wss://*.firebaseio.com apikeys.civiccomputing.com *.smartlook.com *.smartlook.cloud *.hotjar.com *.hotjar.io *.linkedin.oribi.io *.google-analytics.com *.doubleclick.net *.tiktok.com *.linkedin.com *.outbrain.com *.bing.com wss://ws.hotjar.com bat.bing.net; media-src 'self' cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; object-src 'self'; child-src 'self' *.livechatinc.com google.com fonts.google.com; frame-src 'self' *.tenancydepositscheme.com *.livechatinc.com www.google.com *.landbot.io *.firebaseio.com *.facebook.com *.youtube.com *.youtube-nocookie.com *.vimeo.com x7qru.mjt.lu td.doubleclick.net *.dotdigital-pages.com elevenlabs.io *.googletagmanager.com; manifest-src 'self'
vary: Origin