Skip to main content

Is ch-info.swiss a Scam? Security Check Results - Schweizerische Bundeskanzlei (BK) Reviews

ch-info.swiss favicon

Is ch-info.swiss Safe? Security Analysis for Schweizerische Bundeskanzlei (BK)

https://ch-info.swiss

Check if ch-info.swiss is a scam or legitimate. Free security scan and reviews.

GovernmentSwitzerlandenterprise
Vue.jsVuetifyGoogle Domains DNSMatomo Analytics
Analyzed 10/4/2025Completed 6:43:40 AM
60
Security Score
MEDIUM RISK

AI Summary

The website ch-info.swiss is an official Swiss government portal managed by the Schweizerische Bundeskanzlei (Swiss Federal Chancellery). It primarily serves as an information dissemination platform providing editions of magazines about Switzerland's political system and governance. The site targets the general public interested in Swiss government affairs and offers multilingual content in English, German, French, and Italian. The business model is focused on government transparency and public education, positioning itself as a trusted official source within the government sector. Technically, the website employs modern frontend technologies including Vue.js and Vuetify, hosted via Hostpoint with DNS managed by Google Cloud DNS. The site demonstrates good mobile optimization and a moderate performance profile. Analytics are implemented using Matomo, indicating a preference for privacy-conscious tracking. However, the site lacks DNSSEC and security headers, which are recommended for enhanced security. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data or forms, reducing attack surface. Nonetheless, the lack of DNSSEC and security headers, as well as missing privacy and cookie policies, represent areas for improvement. No incident response or vulnerability disclosure information is present, which could be enhanced to improve security posture and compliance. Overall, the website is legitimate, trustworthy, and professionally maintained, but could improve privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, and providing clear contact information for security and general inquiries.

Detected Technologies

Vue.jsVuetifyGoogle Domains DNSMatomo Analytics

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The Schweizerische Bundeskanzlei operates this website as an authoritative government information channel, focusing on political education and transparency. The market positioning is strong as the official Swiss government source, with no direct commercial competition. The business model is non-commercial, aimed at public service. Key services include publishing yearly editions of political informational magazines and providing multilingual access to Swiss governance content. The target audience is broad, encompassing residents, researchers, and international observers interested in Swiss politics. Growth indicators include recent editions from 2022 to 2025, showing ongoing content updates. The partnership ecosystem is limited to government entities and official service providers. The website's operations reflect a stable, enterprise-level government project with consistent branding and high trust signals.

Security Posture Analysis

Comprehensive Security Assessment

The website exhibits a moderate security maturity level. HTTPS is enforced, and no sensitive data exposure or vulnerable libraries were detected. However, the absence of DNSSEC and security headers such as Content-Security-Policy and Strict-Transport-Security reduces the overall security posture. No forms or user input fields are present, minimizing risk from injection attacks. The lack of published security policies, incident response contacts, or vulnerability disclosure mechanisms indicates gaps in compliance and readiness. Data protection officer information is not provided, which is a compliance consideration. The use of Matomo analytics suggests some privacy awareness, but no cookie consent mechanism is visible, which may conflict with GDPR requirements. Overall, the site is secure for informational purposes but would benefit from enhanced security controls and transparency.

Strategic Recommendations

Priority Actions for Security Improvement

1

Enable DNSSEC on the domain to secure DNS resolution and prevent spoofing.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Schweizerische Bundeskanzlei (BK)

Description:

Official Swiss government information portal providing editions of informational magazines about Switzerland's political system and governance.

Key Services:
Publishing editions of informational magazinesProviding multilingual content about Swiss governance
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Vue.jsVuetifyGoogle Domains DNSMatomo Analytics
Frameworks:
Vue.jsVuetify
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
70/100
Best Practices:
  • HTTPS enforced (implied by https URLs)
  • No exposed sensitive data in HTML
  • No forms detected to collect user input

Analytics & Tracking

Services:
Matomo
Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
Matomo
Transparency Level:poor

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Official Swiss government website providing political information editions.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

75/100
Score

Weak X-Content-Type-Options configuration

LOW

Current value: "nosniff, nosniff"

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Weak Referrer-Policy configuration

LOW

Current value: "strict-origin-when-cross-origin, strict-origin-when-cross-origin"

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

80/100
Score

No DMARC reporting

LOW

DMARC aggregate reports not configured

Strict DMARC Alignment

LOW

Strict alignment may cause legitimate emails to fail

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 -all
DNS Lookups:0/10
Policy:-all
DKIM Selectors Found
Selector:default0
Selector:google0
Selector:k10
Selector:k20
Selector:dkim0
Selector:s10
DMARC Details
Policy:reject
Subdomain Policy:reject

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

72/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 82 days

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DNS Records

A Records:139.59.207.40
Name Servers:
ns-cloud-c1.googledomains.comDNS only
ns-cloud-c2.googledomains.comDNS only
ns-cloud-c3.googledomains.comDNS only
ns-cloud-c4.googledomains.comDNS only
SOA:Serial: 2, TTL: 300s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:75ms

SPF Analysis

SPF Record:
v=spf1 -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

40/100
Score

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built using modern frontend frameworks Vue.js and Vuetify, indicating a contemporary and maintainable codebase. Hosting is managed by Hostpoint with DNS services from Google Cloud DNS, ensuring reliable infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. SEO is basic but includes canonical and hreflang tags for multilingual support. No common CMS was detected, suggesting a custom or proprietary solution. Analytics are handled by Matomo, a privacy-focused tool. The absence of DNSSEC and security headers represents technical debt and security risk. No forms or interactive elements reduce complexity but also limit user engagement. Overall, the technical infrastructure is solid but could be enhanced with improved security configurations and privacy compliance features.
⭐ Verified Community Reviews

What others say about ch-info.swiss

Share your experience to help others make informed decisions. We verify every review by email and publish it once our moderation team approves it.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

out of 5

0 reviews published

Loading reviews…

How did we do?

Your feedback directly shapes our roadmap. Rate the quality of this report, leave an optional comment, and let us know if you want our security specialists to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.

Analyze Another Website