Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 105.73.1.22 |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 No Compression | The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 105.73.1.22
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 No Compression The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://www.myinwi.ma:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://inwi.ma/myinwi | 307 | HTTP/1.1 307 Temporary Redirect |
| 3 | https://inwi.ma/fr/myinwi | 200 | HTTP/1.1 200 OK |
#1 URL https://www.myinwi.ma:443
HTTP Status Code 301
Status HTTP/1.1 301 Moved Permanently
#2 URL https://inwi.ma/myinwi
HTTP Status Code 307
Status HTTP/1.1 307 Temporary Redirect
#3 URL https://inwi.ma/fr/myinwi
HTTP Status Code 200
Status HTTP/1.1 200 OK
Performance
| DNS Lookup | 2.9 ms |
| TCP Connect | 32.5 ms |
| TLS Handshake | 33.9 ms |
| Time To First Byte (TTFB) | 225.5 ms |
| Content Download | 252.4 ms |
| Total Response Time | 477.8 ms |
DNS Lookup 2.9 ms
TCP Connect 32.5 ms
TLS Handshake 33.9 ms
Time To First Byte (TTFB) 225.5 ms
Content Download 252.4 ms
Total Response Time 477.8 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=16070400; includeSubDomains |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ DENY |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=16070400; includeSubDomains
CSP ⚠ Not configured
X-Frame-Options ✔ DENY
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
Detected Technologies
| Technology | React Google Analytics Google Tag Manager Next.js |
Technology React Google Analytics Google Tag Manager Next.js
HTTP Headers
| Date
| Tue, 28 Jul 2026 02:57:58 GMT |
| Content-Type
| text/html; charset=utf-8 |
| Connection
| keep-alive |
| Referrer-Policy
| strict-origin-when-cross-origin |
| Permissions-Policy
| camera=(self), microphone=(), geolocation=(self), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=() |
| Strict-Transport-Security
| max-age=16070400; includeSubDomains |
| X-Frame-Options
| DENY |
| X-Content-Type-Options
| nosniff |
| Is-mobile
| false |
| Link
| ; rel=preload; as="style" |
| Set-cookie
| x-user-uuid=c9ff13d0-140b-4c83-b187-0d5d2af08afc; Path=/ |
| X-pathname
| /myinwi |
| X-middleware-rewrite
| /fr/myinwi |
| Vary
| rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding |
| Cache-Control
| no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 |
| X-OneAgent-JS-Injection
| true |
| X-ruxit-JS-Agent
| true |
| Traceresponse
| 00-c695944b0cb6cfeba52c0962bd18544a-47309126ef569884-01 |
| X-dt-tracestate
| 1b29898e-d1284ad@dt |
| Server-Timing
| dtSInfo;desc="0", dtRpid;desc="311229312" |
| Access-Control-Allow-Origin
| * |
| X-XSS-Protection
| 1; mode=block |
| Access-Control-Allow-Credentials
| true |
| Access-Control-Allow-Methods
| GET, POST, PUT, DELETE, OPTIONS |
| Access-Control-Allow-Headers
| DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,access_token,__setXHR_ |
| Last-Modified
| Tuesday, 28-Jul-2026 02:57:58 GMT |
| Transfer-Encoding
| chunked |
Meta Tags
| Viewport | width=device-width, initial-scale=1, maximum-scale=1 |
| Google-site-verification | X7jRvMGh15-ZqHmtpnj7r44BDNWmITHrgOoGhU9iTxM |
| Robots | noindex |
Date Tue, 28 Jul 2026 02:57:58 GMT
Content-Type text/html; charset=utf-8
Connection keep-alive
Referrer-Policy strict-origin-when-cross-origin
Permissions-Policy camera=(self), microphone=(), geolocation=(self), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=()
Strict-Transport-Security max-age=16070400; includeSubDomains
X-Frame-Options DENY
X-Content-Type-Options nosniff
Is-mobile false
Link ; rel=preload; as="style"
Set-cookie x-user-uuid=c9ff13d0-140b-4c83-b187-0d5d2af08afc; Path=/
X-pathname /myinwi
X-middleware-rewrite /fr/myinwi
Vary rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
Cache-Control no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
X-OneAgent-JS-Injection true
X-ruxit-JS-Agent true
Traceresponse 00-c695944b0cb6cfeba52c0962bd18544a-47309126ef569884-01
X-dt-tracestate 1b29898e-d1284ad@dt
Server-Timing dtSInfo;desc="0", dtRpid;desc="311229312"
Access-Control-Allow-Origin *
X-XSS-Protection 1; mode=block
Access-Control-Allow-Credentials true
Access-Control-Allow-Methods GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,access_token,__setXHR_
Last-Modified Tuesday, 28-Jul-2026 02:57:58 GMT
Transfer-Encoding chunked
