cermati.com Review

TitletagDescriptiontaglanguage
Cermati: Pinjaman, Kartu Kredit, Asuransi, Investasi & Emas Indonesian
Alexarank
112564
Ip adress34.120.100.196Nameserverns-cloud-a4.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a1.googledomains.com
ns-cloud-a3.googledomains.com
Status code200
robots.txt
 N/A
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Location: https://www.cermati.com:443/
Content-Length: 0
Date: Sat, 01 Nov 2025 17:53:28 GMT
Content-Type: text/html; charset=UTF-8

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 01 Nov 2025 17:53:28 GMT
Content-Type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
x-request-id: 433c6527-e692-4a23-839b-a237e15bdb51
set-cookie: csrf-secret=s%3AAwyxD2-68IqMaXXk7Z__HeB_.bBxBLe%2BcVjVZyFyvJhzhGzN31T5WX56%2BPojSOURqH%2Fk; Domain=cermati.com; Path=/; HTTPOnly; Secure; HttpOnly; Secure; SameSite=Strict
set-cookie: csrf-token=s%3ABgWkvwhy-T2LkmgI7FJk0PGHuA2x6uWz_I14.rwMFX2xDMBtsubpSCAvdDzWFiu4CpWLKiz8T%2BPNYX14; Domain=cermati.com; Path=/; HTTPOnly; Secure; HttpOnly; Secure; SameSite=Strict
content-security-policy: frame-ancestors 'self' https://*.cermati.com https://www-cermati-com.cdn.ampproject.org https://www.google.com android-app://com.google.android.googlequicksearchbox http://go.cermati.com https://go.cermati.com https://*.indodana.id https://*.arthainvestateknologi.co.id; report-uri https://www.cermati.com/api/v1/csp/violation-report?signature=92e6ed51703ef04e682bd08faf4a9e900417b916794a573b5997cf204711b2e0; report-to default;
report-to: {"group":"default","max_age":1800,"endpoints":[{"url":"https://www.cermati.com/api/v1/csp/violation-report?signature=92e6ed51703ef04e682bd08faf4a9e900417b916794a573b5997cf204711b2e0"}],"include_subdomains":true}
reporting-endpoints: default="https://www.cermati.com/api/v1/csp/violation-report?signature=92e6ed51703ef04e682bd08faf4a9e900417b916794a573b5997cf204711b2e0"
x-nextjs-cache: HIT
cache-control: s-maxage=43200, stale-while-revalidate
etag: "10278dwha542t34"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 30
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked

iframe