Invalid contents of crossdomain.xml content with api.soundcloud.com

Question

There seems to be something wrong with the SoundCloud.com crossdomain.xml file at this URL: https://api.soundcloud.com/crossdomain.xml

If you open this xml link in a new tab / window and refresh the page several times, you will notice inconsistency in the displayed xml content ...

He sometimes serves for this:

<cross-domain-policy>
    <!--
        Allow access from anywhere. This policy should be used for domains
        serving third party apps (api, images, streams).
    -->
    <allow-access-from domain="*" secure="false"/>
    <site-control permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>

But also sometimes it serves:

<cross-domain-policy>
    <!--
        Lock down access to Flash applications served by us.
        This policy should be served for all domains that Flash apps require
        access to and that are not serving api, images or stream (those need
        to be open to third party apps as well).
    -->
    <allow-access-from domain="soundcloud.com" secure="false"/>
    <allow-access-from domain="*.soundcloud.com" secure="false"/>
    <allow-access-from domain="*.sndcdn.com" secure="false"/>
    <site-control permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>

We need the first answer (Allow-All) that will always be used for our SoundCloud integration to work (the built-in soundcloud tracks in Calameo publications: http://www.calameo.com )

Any ideas to fix or get around this? Thank.

UPDATE (2015/10/12)

, SoundCloud crossdomain.xml . URL- :

<cross-domain-policy>
    <!--
        Lock down access to Flash applications served by us.
        This policy should be served for all domains that Flash apps require
        access to and that are not serving api, images or stream (those need
        to be open to third party apps as well).
    -->
    <allow-access-from domain="soundcloud.com" secure="false"/>
    <allow-access-from domain="*.soundcloud.com" secure="false"/>
    <allow-access-from domain="*.sndcdn.com" secure="false"/>
    <site-control permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>