ow.ly Review

 # tells Google not to include these URLs in the index even if they have already been crawled
User-Agent: Googlebot
Noindex: /login
Noindex: /auth
Noindex: /logout
Noindex: /ajax/*

# tells all engines not to crawl these URLs
User-Agent: *
Disallow: /login
Disallow: /auth
Disallow: /logout
Disallow: /ajax/*
Disallow: /docs
Disallow: /d

Sitemap: http://ow.ly/sitemap.xml

HTTP/1.1 301 Moved Permanently
Date: Thu, 30 Oct 2025 15:23:42 GMT
Content-Length: 0
Connection: keep-alive
Location: /url/shorten-url
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Date: Thu, 30 Oct 2025 15:23:43 GMT
Content-Length: 0
Connection: keep-alive
Location: https://hootsuite.com/pages/owly
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 30 Oct 2025 15:23:43 GMT
X-Gridnum: 556b747654-cscjq
X-Hootsuite-Ingress: aperture
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/;
Content-Security-Policy-Report-Only: object-src 'none'; Script-src 'nonce-OHLj7k34zp35wHBUDZE6n++Uo+b+sKrXgEJJi3/GjmcMJPIV0RKbWze4AdsjqTV/ndXAIgHZW4HsHd5BxqIVnA==' 'strict-dynamic' 'unsafe-eval' blob: https: http:; frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/; report-uri https://api-services.hootsuite.com/service/csp-violation-report
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: https://www.hootsuite.com/pages/owly
P3p: CP="Hootsuite does not have a P3P policy"
Pragma: no-cache
Server-Timing: layoutInit;dur=3, total;dur=15
Set-Cookie: dlpsv=90; Path=/; HttpOnly; Secure
Set-Cookie: dashboardCSRF=dc9e10226743886af563566c8f0716596b0291a06ff1e6607d9d4fd53357d424.ba652c4b6861934683495648234c024b137b01ead0bf378ed3cacf24412578c63be3fde70e00928d86c6db6265b1e31abd7275f481848bf16be1b4912dbf0772; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Set-Cookie: __aperture_sid=d908791c-d62e-48a2-8e73-35d6254fb3bc.3f1845788a0cac06411360b752063d8c50c76e4bacc57828b05e49ab89d222bd; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Strict-Transport-Security: max-age=31536001; includeSubDomains; preload
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 67b68604cb3ab08ecf76f962806aae88.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT57-P6
X-Amz-Cf-Id: Lx5bqWDPWMVh65XTk89OZNiRg4UnmdeYTaccCIjQ6TrYhd561Vh67Q==
Vary: Origin

HTTP/1.1 200 OK
Age: 200
Cache-Control: public, max-age=0, must-revalidate
Content-Encoding: br
Content-Security-Policy: frame-ancestors 'self' https://blog.hootsuite.com https://app.contentful.com https://hootsuite.com https://staging.hootsuite.com/; report-uri https://o3805.ingest.sentry.io/api/6608832/security/?sentry_key=f44c14ec894c4667b3fd34b84042794d
Content-Type: text/html; charset=utf-8
Date: Thu, 30 Oct 2025 13:28:06 GMT
Etag: W/"tecwf1nzsh6efm"
Referrer-Policy: no-referrer-when-downgrade
Server: Vercel
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Matched-Path: /en-us/pages/owly
X-Powered-By: Next.js
X-Vercel-Cache: HIT
X-Vercel-Id: hnd1::iad1::ncqrh-1761837823714-2fe6f027ff6b
Transfer-Encoding: chunked