oldtbilisi.ge

GWS-Wine-Company

ძველი თბილისი OLD TBILISI ქართული ღვინის წამყვანი ბრენდია, იგი 2001 წლიდან არსებობს და ცხოვრების ხალისს, ცხოვრებით ტკბობას განასახიერებს.

Built with

Backend

Laravel

Also detected

Infrastructure

Nginx

Overview

Status

alive

Registered

unknown (this domain's registry doesn't publish it via RDAP)

First seen here

2026-09-22

Security grade

F (50/100, from headers & TLS)

Privacy score

90/100 (0 third-party script hosts, 0 tracking/marketing services)

Hosting

Hetzner Online GmbH · AS24940 · Germany

Server header

nginx

Response time

76 ms to first byte, measured from our crawler

TLS certificate

Let's Encrypt · TLSv1.3 · expires 2026-12-19

Mobile-ready

yes (viewport meta tag)

Linked to from

0 other sites seen so far

What to fix

1. Add Strict-Transport-Security
   Header: Strict-Transport-Security: max-age=31536000; includeSubDomains
2. Add a Content-Security-Policy
   Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.
3. Add a Referrer-Policy
   Header: Referrer-Policy: strict-origin-when-cross-origin
4. Mark cookies Secure and HttpOnly
   At least one cookie is sent without these flags, exposing it to interception or scripts.
5. Publish a DMARC record
   A TXT record at _dmarc.<domain>; start with v=DMARC1; p=none; to monitor.

Security & email signals

• ✓ HTTPS
• ✗ HSTS
• ✗ Content-Security-Policy
• ✓ X-Content-Type-Options
• ✓ X-Frame-Options
• ✗ Referrer-Policy
• ✗ Permissions-Policy
• ✓ SPF record
• ✗ DMARC record
• ✗ DKIM record
• ✗ Cookies set securely
• ✓ Has real content (not an empty shell)
• ✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/oldtbilisi.ge"><img src="https://webtelemetry.dev/badge/oldtbilisi.ge.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.