Skip to main content

Is mitkamjit.cz a Scam? Security Check Results - Sdružení pracovníků domů dětí a mládeže v ČR Reviews

S

Is mitkamjit.cz Safe? Security Analysis for Sdružení pracovníků domů dětí a mládeže v ČR

Check if mitkamjit.cz is a scam or legitimate. Free security scan and reviews.

EducationCzech Republicsmall
jQuery 3.2.1Bootstrap CSSGoogle Fonts (Roboto)Font Awesome 5.10.0Google Analytics+1 more
Analyzed 8/1/2025Completed 10:16:47 AM
40
Security Score
HIGH RISK

AI Summary

The website mitkamjit.cz serves as a portal for sharing activities, ideas, and educational content primarily targeted at leisure centers and children's homes across the Czech Republic. It is affiliated with the Sdružení pracovníků domů dětí a mládeže v ČR, a Czech association supporting these institutions. The portal offers categorized content by age and activity type, fostering community collaboration and resource sharing. The site has been operational since 2003, indicating a mature presence in its niche educational sector. Technically, the website employs a standard web technology stack including jQuery, Bootstrap, Font Awesome, and Google Analytics for tracking. The site is moderately optimized for mobile devices and offers a clear navigation structure. However, it lacks advanced accessibility features and comprehensive SEO optimizations. Hosting and domain registration are consistent and stable, with no signs of privacy protection or suspicious WHOIS data. From a security perspective, the site uses HTTPS for external resources but does not explicitly show security headers or detailed security policies. There is no visible privacy or cookie policy, which is a compliance gap, especially under GDPR. No contact or incident response information is provided, limiting transparency. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is a functional, niche educational platform with moderate technical maturity and some gaps in privacy and security compliance. Strategic improvements in privacy policy publication, security header implementation, and contact transparency would enhance trust and compliance.

Detected Technologies

jQuery 3.2.1Bootstrap CSSGoogle Fonts (Roboto)Font Awesome 5.10.0Google AnalyticsGoogle Tag Manager

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Mitkamjit.cz operates as a specialized educational content sharing platform serving leisure centers and children's homes in the Czech Republic. Its market position is niche and community-focused, supported by a national association. The business model is non-commercial, relying on contributions from regional institutions. The portal's key services include activity sharing and educational resource dissemination. The target audience comprises educators, children, and youth activity organizers. The platform demonstrates moderate digital maturity with room for growth in technical and compliance areas. Partnerships, such as with spddm.cz, reinforce its community integration. The site’s longevity since 2003 indicates stable operations and trusted presence within its sector.

Security Posture Analysis

Comprehensive Security Assessment

The website exhibits a basic security posture with HTTPS usage implied but lacking explicit security headers such as Content Security Policy, HSTS, or X-Frame-Options. No privacy or cookie policies are present, which is a compliance risk under GDPR. The absence of contact information for security incidents or data protection officers limits incident response readiness. The use of Google Analytics introduces moderate user tracking without clear privacy disclosures. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the security maturity is moderate but requires enhancements in policy transparency, header implementation, and incident response mechanisms to improve compliance and trust.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish comprehensive privacy and cookie policies to improve GDPR compliance and user trust.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Sdružení pracovníků domů dětí a mládeže v ČR

Description:

Portál for sharing activities, ideas, instructions, exercise lessons and positive mindset from leisure centers and children's homes across Czech regions. Activities are categorized by age and focus, including source references.

Key Services:
Activity sharingEducational contentCommunity collaboration
Content Quality:

good

Branding:

moderate

Technical Stack

Technologies:
jQuery 3.2.1Bootstrap CSSGoogle Fonts (Roboto)Font Awesome 5.10.0Google AnalyticsGoogle Tag Manager
Frameworks:
Bootstrap
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
60/100
Best Practices:
  • Use of HTTPS implied by external scripts loaded via HTTPS
  • No visible exposed sensitive data

Analytics & Tracking

Services:
Google AnalyticsGoogle Tag Manager
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is an educational portal for sharing activities among Czech leisure centers and children's homes.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

10/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Cloudflare, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

62/100
Score

No DMARC record found

HIGH

DMARC provides email authentication and reporting

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:spf.protection.outlook.com -all
DNS Lookups:1/10
Policy:-all
DMARC Details
Policy:none
MTA-STS Details

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

85/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 86 days

Mixed Content Detected

MEDIUM

2 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:mitkamjit.cz
Issuer:R11
Valid Until:10/26/2025 (86 days)
SANs:mitkamjit.cz, www.mitkamjit.cz

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

70/100
Score

Unregistered MX Record

HIGH

MX record points to unregistered domain: mitkamjit-cz.mail.protection.outlook.com

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Registration Details

Domain Age
22 years(mature)

DNS Records

A Records:37.205.10.101
AAAA Records:2a01:430:17:1::ffff:293
Name Servers:
ns.gransy.com
ns2.gransy.com
ns3.gransy.com
ns4.gransy.com
ns5.gransy.com
MX Records:
10: mitkamjit-cz.mail.protection.outlook.com
SOA:Serial: 2753295649, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:148ms

SPF Analysis

SPF Record:
v=spf1 include:spf.protection.outlook.com -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a traditional web technology stack with jQuery 3.2.1, Bootstrap CSS, Font Awesome, and Google Fonts. Google Analytics and Google Tag Manager are used for user tracking. The site is moderately optimized for mobile devices and has a clear navigation structure. Hosting appears stable with domain registration dating back to 2003. However, there is no evidence of a CMS or modern frameworks beyond Bootstrap. Performance is moderate with no explicit performance optimization indicators. Accessibility and SEO optimizations are basic, suggesting opportunities for modernization and technical improvements.
Analyze Another Website