ow.ly Review

 # tells Google not to include these URLs in the index even if they have already been crawled
User-Agent: Googlebot
Noindex: /login
Noindex: /auth
Noindex: /logout
Noindex: /ajax/*

# tells all engines not to crawl these URLs
User-Agent: *
Disallow: /login
Disallow: /auth
Disallow: /logout
Disallow: /ajax/*
Disallow: /docs
Disallow: /d

Sitemap: http://ow.ly/sitemap.xml

HTTP/1.1 301 Moved Permanently
Date: Sat, 29 Nov 2025 12:04:39 GMT
Content-Length: 0
Connection: keep-alive
Location: /url/shorten-url
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Date: Sat, 29 Nov 2025 12:04:39 GMT
Content-Length: 0
Connection: keep-alive
Location: https://hootsuite.com/pages/owly
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 29 Nov 2025 12:04:40 GMT
X-Gridnum: 77b8dbd477-4hh98
X-Hootsuite-Ingress: aperture
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/;
Content-Security-Policy-Report-Only: object-src 'none'; Script-src 'nonce-WoW+pyRfuGgI3SwBkKPZtJU5UmoHZRO+HY+BEM2vZC67YEmP3e8cn0c20/rU8iRw8Rk58GIUJfPue+lbBWHTJw==' 'strict-dynamic' 'unsafe-eval' blob: https: http:; frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/; report-uri https://api-services.hootsuite.com/service/csp-violation-report
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: https://www.hootsuite.com/pages/owly
P3p: CP="Hootsuite does not have a P3P policy"
Pragma: no-cache
Server-Timing: layoutInit;dur=3, total;dur=20
Set-Cookie: dlpsv=74; Path=/; HttpOnly; Secure
Set-Cookie: dashboardCSRF=b853377ca6f74407b20dc19186fdfc12245fbfd679b2557c87923390e7b44f42.48b99dd0dafb3a1d51caf8d26491da64d3c9bdb145f793192c47fa233dfccd763de5205220df1618a2de8987b6de94a170535ad410b53ac6f39c808e07da7ecc; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Set-Cookie: __aperture_sid=12440b16-69d0-4939-ad2f-d94f90a0a49c.89a9b50c3baab79c1652c71bae09fec07baa1b6d9e232732c47d04c5da4a799e; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Strict-Transport-Security: max-age=31536001; includeSubDomains; preload
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 dc1548cf52adc92ab6fc1a9c02f4182c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HKG62-P1
X-Amz-Cf-Id: uzhXQ1Am7_I7k_Ky7cA2-buTND5DkNWEpIzFfIsJVFffk_lck3g2-w==
Vary: Origin

HTTP/1.1 200 OK
Age: 206
Cache-Control: public, max-age=0, must-revalidate
Content-Encoding: br
Content-Security-Policy: frame-ancestors 'self' https://blog.hootsuite.com https://app.contentful.com https://hootsuite.com https://staging.hootsuite.com/; report-uri https://o3805.ingest.sentry.io/api/6608832/security/?sentry_key=f44c14ec894c4667b3fd34b84042794d
Content-Type: text/html; charset=utf-8
Date: Sat, 29 Nov 2025 09:58:58 GMT
Etag: W/"ivawztg8xx6hfl"
Referrer-Policy: no-referrer-when-downgrade
Server: Vercel
Set-Cookie: location=JP; Path=/; Domain=.hootsuite.com
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Matched-Path: /en-us/pages/owly
X-Powered-By: Next.js
X-Vercel-Cache: HIT
X-Vercel-Id: hnd1::iad1::9kpxg-1764417880724-19fb55b804d1
Transfer-Encoding: chunked