Cermati.com

cache-control: private
location: https://www.cermati.com:443/
content-length: 0
date: Tue, 05 May 2026 06:17:56 GMT
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/2 200 
server: openresty
date: Tue, 05 May 2026 06:17:57 GMT
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
x-request-id: f635bd79-a3aa-4ea5-bd87-a3c4306f5495
set-cookie: csrf-secret=s%3AZnLB1YpZ_BqB0Td1jc5FMCih.JghIWPadljtEFM%2FsNnqv%2BvRFyq%2BCRSH%2FXhZxF6LU1Yk; Domain=cermati.com; Path=/; HTTPOnly; Secure; HttpOnly; Secure; SameSite=Strict
set-cookie: csrf-token=s%3A6myMljpU-_tTY3wLHOn6FyngcIknVu7XHxYc.fmv3CqjlW0jdTLkFEQqUzdz%2B3m4qqMQ78Dp4inTAu10; Domain=cermati.com; Path=/; HTTPOnly; Secure; HttpOnly; Secure; SameSite=Strict
content-security-policy: frame-ancestors 'self' https://*.cermati.com https://www-cermati-com.cdn.ampproject.org https://www.google.com android-app://com.google.android.googlequicksearchbox http://go.cermati.com https://go.cermati.com https://*.indodana.id https://*.arthainvestateknologi.co.id; report-uri https://www.cermati.com/api/v1/csp/violation-report?signature=92e6ed51703ef04e682bd08faf4a9e900417b916794a573b5997cf204711b2e0; report-to default;
report-to: {"group":"default","max_age":1800,"endpoints":[{"url":"https://www.cermati.com/api/v1/csp/violation-report?signature=92e6ed51703ef04e682bd08faf4a9e900417b916794a573b5997cf204711b2e0"}],"include_subdomains":true}
reporting-endpoints: default="https://www.cermati.com/api/v1/csp/violation-report?signature=92e6ed51703ef04e682bd08faf4a9e900417b916794a573b5997cf204711b2e0"
x-nextjs-cache: HIT
cache-control: s-maxage=43200, stale-while-revalidate
etag: "sgqb8erlkc2lnt"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 113
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
via: 1.1 google
alt-svc: h3=":443"; ma=2592000