ow.ly Review

 # tells Google not to include these URLs in the index even if they have already been crawled
User-Agent: Googlebot
Noindex: /login
Noindex: /auth
Noindex: /logout
Noindex: /ajax/*

# tells all engines not to crawl these URLs
User-Agent: *
Disallow: /login
Disallow: /auth
Disallow: /logout
Disallow: /ajax/*
Disallow: /docs
Disallow: /d

Sitemap: http://ow.ly/sitemap.xml

HTTP/1.1 301 Moved Permanently
Date: Thu, 15 Jan 2026 00:32:55 GMT
Content-Length: 0
Connection: keep-alive
Location: /url/shorten-url
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Date: Thu, 15 Jan 2026 00:32:55 GMT
Content-Length: 0
Connection: keep-alive
Location: https://hootsuite.com/pages/owly
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 15 Jan 2026 00:32:55 GMT
X-Gridnum: 6b7895bf47-4226s
X-Hootsuite-Ingress: aperture
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/;
Content-Security-Policy-Report-Only: object-src 'none'; Script-src 'nonce-/rql7ln6P5Ac6EM1hVWJsU8zUBh9qM8jh9LJ75DdxDgcyiCKwTkAZHp8hzsj/PVIPGZQsNX7B5qIrl19Mpeung==' 'strict-dynamic' 'unsafe-eval' blob: https: http:; frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/; report-uri https://api-services.hootsuite.com/service/csp-violation-report
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: https://www.hootsuite.com/pages/owly
P3p: CP="Hootsuite does not have a P3P policy"
Pragma: no-cache
Server-Timing: layoutInit;dur=3, total;dur=19
Set-Cookie: dlpsv=4; Path=/; HttpOnly; Secure
Set-Cookie: dashboardCSRF=47a2418598e1d991730409b247b221e3846aca208c4fba4c872077656fbd4499.9b24eba9d4a181e1d8e6091356fa5028978a1a4597749ef25f2f510076dc40621bb929f4c2a505f54184b50e5a0b89208210b4bc035f5cd18fc200e122dfe7e5; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Set-Cookie: __aperture_sid=6c47b7fe-9844-4e14-9972-57b4c6d544f9.8d877bd057aeb634695883cecfa62a8a501593a328a005c266850fe8d572e347; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Strict-Transport-Security: max-age=31536001; includeSubDomains; preload
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 7792f424210597c7fbe132bbfbbf22fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HKG62-P1
X-Amz-Cf-Id: UePOEyE3y717jD4cg9tcNM-6OSBI8bk08SCpjQbIFdfZHP_hBt9ATw==
Vary: Origin

HTTP/1.1 200 OK
Age: 223
Cache-Control: public, max-age=0, must-revalidate
Content-Encoding: br
Content-Security-Policy: frame-ancestors 'self' https://blog.hootsuite.com https://app.contentful.com https://hootsuite.com https://staging.hootsuite.com/; report-uri https://o3805.ingest.sentry.io/api/6608832/security/?sentry_key=f44c14ec894c4667b3fd34b84042794d
Content-Type: text/html; charset=utf-8
Date: Wed, 14 Jan 2026 20:30:59 GMT
Etag: W/"s1g3rnt26a6jcx"
Referrer-Policy: no-referrer-when-downgrade
Server: Vercel
Set-Cookie: location=JP; Path=/; Domain=.hootsuite.com
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Matched-Path: /en-us/pages/owly
X-Powered-By: Next.js
X-Vercel-Cache: HIT
X-Vercel-Id: hnd1::iad1::bh8m2-1768437176635-85c353be0036
Transfer-Encoding: chunked