Embeddable on any site

google.com · 429 Too Many Requests · 686 ms

No header blocks framing.

Framing rules

  • X-Frame-Optionsabsent

    The page sends no X-Frame-Options.

  • frame-ancestorsabsent

    No enforced Content-Security-Policy sets frame-ancestors.

  • Set-Cookieabsent

    The page sets no cookies, so cookies do not change how it works in a frame.

  • Cross-Origin-Resource-Policyabsent

    Not sent. A cross-origin page with Cross-Origin-Embedder-Policy: require-corp cannot embed it.

Raw response headers

HTTP 429 Too Many Requests
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cache-control: no-store, no-cache, must-revalidate
cf-cache-status: DYNAMIC
cf-ray: a579bb019a773524-CMH
connection: close
content-length: 3179
content-type: text/html
date: Mon, 09 Nov 2026 03:28:59 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
server: cloudflare
x-xss-protection: 0

Fetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.

Know before you embed.

Free, no sign-up, nothing stored. Paste a URL and get a verdict, a live preview, and the fix.