ow.ly Review

 # tells Google not to include these URLs in the index even if they have already been crawled
User-Agent: Googlebot
Noindex: /login
Noindex: /auth
Noindex: /logout
Noindex: /ajax/*

# tells all engines not to crawl these URLs
User-Agent: *
Disallow: /login
Disallow: /auth
Disallow: /logout
Disallow: /ajax/*
Disallow: /docs
Disallow: /d

Sitemap: http://ow.ly/sitemap.xml

HTTP/1.1 301 Moved Permanently
Date: Fri, 04 Jul 2025 04:35:05 GMT
Content-Length: 0
Connection: keep-alive
Location: /url/shorten-url
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Date: Fri, 04 Jul 2025 04:35:05 GMT
Content-Length: 0
Connection: keep-alive
Location: https://hootsuite.com/pages/owly
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: master-only
X-Xss-Protection: 1; mode=block

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 04 Jul 2025 04:35:06 GMT
X-Gridnum: 79cf84457c-vhldh
X-Hootsuite-Ingress: aperture
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/;
Content-Security-Policy-Report-Only: object-src 'none'; Script-src 'nonce-Rf6ReVbm/cwYl7vTZfLL/kfhsgaB09aiLqWAfPf3wtjBJJA2+jgtig/roCQ/zvYV+m6pgYqV9G6ASn+jic9fkQ==' 'strict-dynamic' 'unsafe-eval' blob: https: http:; frame-ancestors 'self' https://*.hootsuite.com https://*.testbox.com/; report-uri https://api-services.hootsuite.com/service/csp-violation-report
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: https://www.hootsuite.com/pages/owly
P3p: CP="Hootsuite does not have a P3P policy"
Pragma: no-cache
Server-Timing: layoutInit;dur=3, total;dur=18
Set-Cookie: _SID=ie0llve0p9ssvghe7r010qrs0m; Path=/; Expires=Sun, 03 Aug 2025 00:35:06 GMT; Max-Age=2577600; HttpOnly; Secure; SameSite=None; Partitioned
Set-Cookie: dlpsv=80; Path=/; HttpOnly; Secure
Set-Cookie: apiAuthorization=deleted; Path=/; Domain=hootsuite.com; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; HttpOnly; Secure; SameSite=None; Partitioned
Set-Cookie: hsLoggedIn=deleted; Path=/; Domain=hootsuite.com; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0
Set-Cookie: __aperture_sid=bacc0394-52f6-4282-98df-6bdabb6a3a8c.9ed8b0b2ccec174ab7be16f406021f5355ecc499e3690abbc1294e775c418c22; Path=/; HttpOnly; Secure; SameSite=None; Partitioned
Strict-Transport-Security: max-age=31536001; includeSubDomains; preload
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 584e8f7be55c53ae3c6ed99969159652.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT57-P6
X-Amz-Cf-Id: -Ozz8DTVl_zHHGDzBCfr_GxW8KoY_1N1byd5CUnxZOo2CFCr91dNeg==
Vary: Origin

HTTP/1.1 200 OK
Age: 127
Cache-Control: public, max-age=0, must-revalidate
Content-Encoding: br
Content-Security-Policy: frame-ancestors 'self' https://blog.hootsuite.com https://app.contentful.com https://hootsuite.com https://staging.hootsuite.com/; report-uri https://o3805.ingest.sentry.io/api/6608832/security/?sentry_key=f44c14ec894c4667b3fd34b84042794d
Content-Type: text/html; charset=utf-8
Date: Fri, 04 Jul 2025 04:07:40 GMT
Etag: W/"10a5e8gietd6i5j"
Referrer-Policy: no-referrer-when-downgrade
Server: Vercel
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Matched-Path: /en-us/pages/owly
X-Nextjs-Prerender: 1
X-Powered-By: Next.js
X-Vercel-Cache: HIT
X-Vercel-Id: hnd1::iad1::xhfn8-1751603706331-d6c7a23e42cc
Transfer-Encoding: chunked