Embeddable on some sites only

Framing rules

• X-Frame-Options: SAMEORIGINdeny

  SAMEORIGIN allows a frame only on pages of the same origin.

• frame-ancestorsabsent

  No enforced Content-Security-Policy sets frame-ancestors.

• Set-Cookie × 1warning

  None of the 1 cookies go into a cross-site frame (sc_tracking_anonymous_id): a cookie needs SameSite=None; Secure for that. A login or session inside the frame can fail.

• Cross-Origin-Resource-Policyabsent

  Not sent. A cross-origin page with Cross-Origin-Embedder-Policy: require-corp cannot embed it.

HTTP 200 OK
cache-control: private, max-age=0, no-cache, no-store
cf-cache-status: DYNAMIC
cf-ray: a579ac0a7b9fddf0-CMH
connection: close
content-type: text/html
date: Mon, 09 Nov 2026 03:18:46 GMT
server: cloudflare
server-timing: enabledFeatures; dur=4.74054; desc="api-v2/enabledFeatures", geoip; dur=0.94618; desc="geoip/geoip", privacySettings; dur=84.626379; desc="api-v2/privacySettings", resolve; dur=45.499008; desc="api-v2/resolve", user; dur=16.226139; desc="api-v2/user", trackComments; dur=47.045098; desc="api-v2/trackComments"
strict-transport-security: max-age=63072000; includeSubdomains; preload
transfer-encoding: chunked
vary: Accept-Encoding
via: 1.1 2ac235acced332a2c079b041387a4918.cloudfront.net (CloudFront)
x-amz-cf-id: zrWH8wTYhHRyXw34UWwKPmW_2V8HWHDZwWsGzkJe1gU7WsPsgqu52Q==
x-amz-cf-pop: ORD56-P1
x-cache: Miss from cloudfront
x-frame-options: SAMEORIGIN
x-pants: distant-towel
x-xss-protection: 1; mode=block
set-cookie: sc_tracking_anonymous_id=…; path=/; expires=Wed, 08 Nov 2028 03:18:46 GMT; domain=.soundcloud.com

Fetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.