HTTP Headers Analysis for https://dispatch.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000;includeSubDomains;preload

Content-Security-Policy

Weak

upgrade-insecure-requests; frame-ancestors; object-src Analyze

Content-Security-Policy-Report-Only

Basic

script-src; base-uri; report-uri; +1 more Analyze

X-Frame-Options

Excellent

deny

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

bluetooth=(), camera=(), clipboard-read=(); +11 more

Recommendations

• Significantly strengthen CSP directives

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Encoding,User-Agent,Sec-CH-UA-Mobile

accept-ranges: bytes
connection: close
vary: Accept-Encoding,User-Agent,Sec-CH-UA-Mobile

Caching Headers

Age

Caching

0

Cache-Control

Caching

no-store

Etag

Caching

W/"3d837-VIIwXkLdUWSGVY2epFKmXZoEpxE"

age: 0
cache-control: no-store
etag: W/"3d837-VIIwXkLdUWSGVY2epFKmXZoEpxE"

Content Headers

Content-Length

Content

227533

Content-Type

Content

text/html; charset=utf-8

content-length: 227533
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: gup_anonid=dc4dee7d-eb57-40d2-a5d1-33fb013e1a6b; Domain=.dispatch.com; Max-Age=31536000; Path=/; SameSite=Lax; Secure; Priority=High
gup_clientid=177371de-9263-4918-abd9-fc4fa68e84c6; Domain=.dispatch.com; Max-Age=31536000; Path=/; SameSite=Lax; Secure; Priority=High
gnt_ub=49;domain=.dispatch.com;path=/;secure;samesite=lax;max-age=31536000;priority=high
gnt_sb=10;domain=.dispatch.com;path=/;secure;samesite=lax;max-age=31536000;priority=high
gnt_eid=control:10:out-market;domain=.dispatch.com;path=/;secure;samesite=lax;max-age=5184000;priority=high;
gnt_w=68~2-q1a2z3434cf2d2~Mostly%20Sunny;domain=www.dispatch.com;path=/;samesite=lax;secure;priority=high;
gnt_i=30934664397419561076*30081*US~IL~chicago~60602*h~x;domain=.dispatch.com;path=/;samesite=lax;max-age=31536000;secure;priority=high
_ga=GA1.1.1893231291.1778442132;domain=.dispatch.com;path=/;samesite=lax;max-age=31536000;secure;priority=high

Other Headers

Date

Other

Sun, 10 May 2026 19:42:12 GMT

Document-Policy

Other

include-js-call-stacks-in-crash-reports

Feature-Policy

Other

camera 'none';display-capture 'none';geolocation 'none';microphone 'none';payment 'none';usb 'none';xr-spatial-tracking 'none'

Nel

Other

Report-To Group default max-age: 1y

success: 0.5% include subdomains

Origin-Agent-Cluster

Other

?1

Report-To

Other

Group default max-age: 1y

Endpoint 1 https://reporting-api.gannettinnovation.com

Server-Timing

Other

gnt_i;desc="30934664397419561076*30081*US~IL~chicago~60602*h~x"

X-Cache

Other

MISS, MISS, MISS

X-Robots-Tag

Other

noarchive,nocache

date: Sun, 10 May 2026 19:42:12 GMT
document-policy: include-js-call-stacks-in-crash-reports
feature-policy: camera 'none';display-capture 'none';geolocation 'none';microphone 'none';payment 'none';usb 'none';xr-spatial-tracking 'none'
nel: {"report_to":"default","max_age":31557600,"include_subdomains":true,"success_fraction":0.005}
origin-agent-cluster: ?1
report-to: {"max_age":31557600,"include_subdomains":true,"endpoints":[{"url":"https://reporting-api.gannettinnovation.com"}]}
server-timing: gnt_i;desc="30934664397419561076*30081*US~IL~chicago~60602*h~x"
x-cache: MISS, MISS, MISS
x-robots-tag: noarchive,nocache

Recommendations

Enable compression (gzip/brotli) to improve performance