ow.ly Review

 # tells Google not to include these URLs in the index even if they have already been crawled
User-Agent: Googlebot
Noindex: /login
Noindex: /auth
Noindex: /logout
Noindex: /ajax/*

# tells all engines not to crawl these URLs
User-Agent: *
Disallow: /login
Disallow: /auth
Disallow: /logout
Disallow: /ajax/*
Disallow: /docs
Disallow: /d

Sitemap: http://ow.ly/sitemap.xml

HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Jan 2026 13:49:15 GMT
Content-Length: 0
Connection: keep-alive
Location: /url/shorten-url
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Jan 2026 13:49:15 GMT
Content-Length: 0
Connection: keep-alive
Location: https://hootsuite.com/pages/owly
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 28 Jan 2026 13:49:15 GMT
X-Gridnum: b54fbc6d5-ph8vn
X-Hootsuite-Ingress: aperture
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/;
Content-Security-Policy-Report-Only: object-src 'none'; Script-src 'nonce-Q/7RGyrvDLqLq+iJ+0HXxSpxI2DL6ppaZC4UUo/Up9OWQt0sJkPUNirp/BZbG+AzJmoMEyAOpb0rtMHvfeXojg==' 'strict-dynamic' 'unsafe-eval' blob: https: http:; frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/; report-uri https://api-services.hootsuite.com/service/csp-violation-report
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: https://www.hootsuite.com/pages/owly
P3p: CP="Hootsuite does not have a P3P policy"
Pragma: no-cache
Server-Timing: layoutInit;dur=4, total;dur=38
Set-Cookie: dlpsv=25; Path=/; HttpOnly; Secure
Set-Cookie: dashboardCSRF=16aa68128adc471cbe1d6a279e1d25282445be031451ca7daabd565124cd5466.e090693e5588a7e7557be0038acc8c7e398dc4371830caa214d87c41abe848ecca1d2af155442f54021956928c70c465d7e04c819c97cfca04a904572edfe410; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Set-Cookie: __aperture_sid=90c02e71-fd61-49c8-aa4c-e5a48d72bc7a.31083a83484f72ea3fe318720f15bd5417ffd54beb036fa607a79db02a468581; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Strict-Transport-Security: max-age=31536001; includeSubDomains; preload
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 c9203ba15af2ae82294719bd8bb5fcce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT57-P2
X-Amz-Cf-Id: 0iZnOUQK-BYPFEYi0Fj7GvY_hPjKExoh_jIWnAOBpr9UwZQGM0VW3g==
Vary: Origin

HTTP/1.1 200 OK
Age: 227
Cache-Control: public, max-age=0, must-revalidate
Content-Encoding: br
Content-Security-Policy: frame-ancestors 'self' https://blog.hootsuite.com https://app.contentful.com https://hootsuite.com https://staging.hootsuite.com/; report-uri https://o3805.ingest.sentry.io/api/6608832/security/?sentry_key=f44c14ec894c4667b3fd34b84042794d
Content-Type: text/html; charset=utf-8
Date: Wed, 28 Jan 2026 13:45:28 GMT
Etag: W/"1tw8ytfxvf6jcf"
Referrer-Policy: no-referrer-when-downgrade
Server: Vercel
Set-Cookie: location=JP; Path=/; Domain=.hootsuite.com
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Matched-Path: /en-us/pages/owly
X-Powered-By: Next.js
X-Vercel-Cache: HIT
X-Vercel-Id: hnd1::iad1::2bjv5-1769608155809-37d60e21461d
Transfer-Encoding: chunked