Xunlocked.com

date: Sat, 04 Oct 2025 16:45:06 GMT
content-type: text/html; charset=utf-8
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
permissions-policy: autoplay=*, fullscreen=*
content-language: en
content-security-policy: default-src 'self' financeunlocked.com sustainabilityunlocked.com *.financeunlocked.com *.xunlocked.com xunlocked.user.com openacademyskills.user.com *.algolia.net insights.algolia.io *.sentry.io wss://xunlocked.user.com wss://openacademyskills.user.com; connect-src 'self' financeunlocked.com sustainabilityunlocked.com *.financeunlocked.com *.sustainabilityunlocked.com *.euromoney.com api-staging.euromoney.dev *.xunlocked.com *.data-scienceunlocked.com *.bpp.com *.dukece.com *.skillsunlocked.com xunlocked.user.com openacademyskills.user.com widget.user.com wss://xunlocked.user.com wss://openacademyskills.user.com *.algolia.net insights.algolia.io *.algolianet.com query-suggestions.eu.algolia.com *.sentry.io requestmetrics.com *.requestmetrics.com 93211hmquj.execute-api.eu-west-2.amazonaws.com www.verse.com *.chargebee.com *.pusher.com wss://*.pusher.com *.google-analytics.com *.google.com *.g.doubleclick.net *.wisepops.com upload.imagekit.io xunlocked-preprod.eu.auth0.com *.linkedin.oribi.io px.ads.linkedin.com forms.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com *.clarity.ms clarity.microsoft.com *.cookiebot.com https://cdn.cookielaw.org https://santander-privacy.my.onetrust.com *.awswaf.com *.hscollectedforms.net vapor-upload-files-staging.s3.eu-west-2.amazonaws.com vapor-upload-files-preprod.s3.eu-west-2.amazonaws.com vapor-file-uploads.s3.eu-west-2.amazonaws.com *.bing.com *.hotjar.io https://cdn.jsdelivr.net https://unpkg.com https://lottie.host unifyintent.com; script-src 'nonce-a0734644-7ff2-4fa6-b8b1-3870a4dd8c94' 'strict-dynamic' 'wasm-unsafe-eval' 'self' xunlocked.user.com openacademyskills.user.com *.financeunlocked.com *.xunlocked.com *.google-analytics.com https://www.googleanalytics.com https://www.google-analytics.com https://www.googleoptimize.com https://optimize.google.com www.googletagmanager.com snap.licdn.com www.googleadservices.com requestmetrics.com *.requestmetrics.com connect.facebook.net *.g.doubleclick.net widget.user.com img-cdn.financeunlocked.com teams.microsoft.com browser.sentry-cdn.com platform.twitter.com *.chargebee.com google.com *.wisepops.com https://wisepops.net js.hsforms.net *.bing.com *.clarity.ms theconversation.com counter.theconversation.com clarity.microsoft.com *.cookiebot.com https://cdn.cookielaw.org *.awswaf.com *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com; style-src 'self' 'unsafe-inline' img-cdn.financeunlocked.com *.xunlocked.com *.typekit.net *.chargebee.com https://optimize.google.com https://fonts.googleapis.com; img-src * data: eu.user.com px.ads.linkedin.com https://www.google-analytics.com https://www.googletagmanager.com https://optimize.google.com; media-src 'self' www.verse.com *.financeunlocked.com *.xunlocked.com; font-src 'self' https://fonts.gstatic.com use.typekit.net *.xunlocked.com data:; object-src 'none'; frame-src 'self' vars.hotjar.com www.verse.com *.financeunlocked.com *.xunlocked.com *.chargebee.com *.euromoney.com xunlocked.user.com openacademyskills.user.com https://www.facebook.com *.g.doubleclick.net td.doubleclick.net https://optimize.google.com forms.hsforms.com https://*.clarity.ms *.bing.com *.cookiebot.com www.googletagmanager.com; worker-src 'self' blob:; manifest-src 'self'; frame-ancestors *;
etag: W/"2b40a-OQPnNVJ/zkT3mKIIOAqH7Cs2AJ4"
vary: Accept-Encoding
content-encoding: br