cutt.ly

.ly user

First seen 2026-05-10 · Last seen 2026-05-10 · ok HTTP/1.1 200 168 ms crawled 2026-05-10

US · 172.66.145.80 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector tech type app saas

HTML metadata

Title

URL Shortener with Branded Short Links & QR Codes | Cuttly

Description

URL Shortener with branded short links & QR Codes. Shorten long URLs instantly, track every click. Link in Bio, Campaigns, Surveys and Teams in one platform.

Language

Canonical

https://cutt.ly

Translations

af
ar
arz
az
bg
bn
cs
da
de
el
en
es
et
fi
fr
he
hi
hr
hu
id
it
ja
ko
lt
lv
ml
ms-my
nl
no
pl
pt
pt-br
ro
ru
sk
sr
sv
sw
ta
th
tl
tr
uk
ur
vi
zh
zh-hk
zh-tw

Open Graph

url: https://cutt.ly
title: URL Shortener with Branded Short Links & QR Codes | Cuttly
site name: Cuttly
description: URL Shortener with branded short links & QR Codes. Shorten long URLs instantly, track every click. Link in Bio, Campaigns, Surveys and Teams in one platform.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.gstatic.com×2
www.googletagmanager.com×2

Social

Registration

Registrar

Libyan Spider Network (int)

Created

2018-01-13

Expires

2030-01-13 1335 days left

Updated

2023-11-30

Name servers

ruben.ns.cloudflare.com
june.ns.cloudflare.com

DNS records live

NS

june.ns.cloudflare.com
ruben.ns.cloudflare.com

MX

1 mx2.iq.pl
5 mail.iq.pl

TXT

google-site-verification=teSYBNU4BseciatKpSeK42EJZMvlH2appyW2-nQPUCw

Email authentication strong

SPF

v=spf1 a mx ip4:86.111.240.0/21 ip4:46.248.190.0/24 ip4:46.248.172.0/24 -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100;

policy: reject (enforced)

DKIM

mail: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeyXcAk68YtfJr974hyZAbp+vL1Uuj4PYWZEECYLZCRaDXbuUbz1trq2CtWe2cfuPmeicesTzK2yiF…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-03-25 to 2026-10-10

Expires in 144 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://cutt.ly/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://cutt.ly https://www.cutt.ly https://www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://platform.twitter.com https://cutt.ly https://www.cutt.ly; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://*.gstatic.com https://scontent.xx.fbcdn.net https://platform-lookaside.fbsbx.com https://www.facebook.com https://cutt.ly https://www.cutt.ly; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com https://cutt.ly https://www.cutt.ly; font-src 'self' data: https://fonts.gstatic.com https://platform.twitter.com; connect-src 'self' https://*.google-analytics.com https://*.facebook.com https://*.fbcdn.net https://graph.facebook.com https://api.twitter.com https://cutt.ly
strict-transport-security: max-age=15552000; includeSubDomains; preload
cross-origin-resource-policy: same-origin