CONTINUOUS INTERNET TELEMETRY24H DRIFT1,428 material changesacross 1,203 domains · +974 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW372 curated domains not answering-1,843 vs yesterdayERRORS2,443 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,192 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,428 material changesacross 1,203 domains · +974 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW372 curated domains not answering-1,843 vs yesterdayERRORS2,443 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,192 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

banorte.com

Observed 2026-07-17T12:36:36.253366585+00:00 (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onBanco Mercantil del Norte S.A
Email byAmazon SES
Secured byDigiCert
Also usesGoogle Search ConsoleAtlassian
1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat banorte.com actually stands on - every host below is a signed observation
banorte.com
A / AAAA
192.100.234.28
Banco Mercantil del Norte S.Aserves the site
NS
a1-157.akam.netns3.banorte.comns2.banorte.coma12-65.akam.net
akam.net + banorte.comanswers its DNS
MX
cdf21.gfnorte.com.mxcdf22.gfnorte.com.mxcdf30.gfnorte.com.mxcdf29.gfnorte.com.mx+6 more
Amazon SESreceives its email
TLS
www.banorte.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 192.100.234.28

MX 10

  • 10cdf21.gfnorte.com.mx
  • 10cdf22.gfnorte.com.mx
  • 10cdf30.gfnorte.com.mx
  • 10cdf29.gfnorte.com.mx
  • 10cdf28.gfnorte.com.mx
  • 10cdf27.gfnorte.com.mx
  • 10cdf26.gfnorte.com.mx
  • 10cdf25.gfnorte.com.mx
  • 10cdf20.gfnorte.com.mx
  • 10cdf23.gfnorte.com.mx

TXT 13

  • v=spf1 mx include:spf.protection.outlook.com include:_spf1.banorte.com include:_spf2.banorte.com include:_spf3.banorte.com include:_spf4.banorte.com include:emailsrvr.com include:amazonses.com include:_spf.salesforce.com -all
  • cisco-ci-domain-verification=249275de2cbe59a60dd413205abcadd2c208a43e8c6bf68032f65b8ec9b39742
  • zEg0yKqzbI69Ke46q/lg8hRxXhkSY7CTf+Ihw8czEzrOron+hS+AGIsJiorkkKWtG+8Ct2N6MQLxVcMEd0ZNrg==
  • google-site-verification=xcefJ9Klyz4BsqwIdDPn_nvhVjBms5mPSDrhkjPc6PM
  • safebreach-domain-verification=b6f99433-db38-40b6-b270-ddc986eaddee
  • Grupo Financiero Banorte
  • MS=ms97498464
  • ibmid=6305c141-9523-4d54-8bdf-476005478c8c
  • _an9mv8ecuixsqiweitlgaxmjxokg927
  • dtm-domain-verification=hJm0wEijOshSNsViMl3xqPFZ-3QpNHPG9yVtFVuGQoY

NS 4

  • a1-157.akam.net
  • ns3.banorte.com
  • ns2.banorte.com
  • a12-65.akam.net

SOA 1

  • ns2.banorte.com postmaster.banorte.com

SRV 5

  • ygg2.vp.vc:5060 p50
  • ygg1.vp.vc:5060 p10
  • ygg1.vp.vc:5061 p10
  • ygg2.vp.vc:5061 p50
  • correo.banorte.com:443 p0

TLS Certificates (3)

Common NameIssuerExpires
www.banorte.com C=US, O=DigiCert Inc, CN=DigiCert EV RSA CA G2 Fri, 04 Dec 2026 23:59:59 +0000
DigiCert EV RSA CA G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Tue, 02 Jul 2030 12:42:50 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Fri, 15 Jan 2038 12:00:00 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for banorte.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for banorte.com <a href="https://domaindrift.io/t/banorte.com"> <img src="https://domaindrift.io/badge/banorte.com.svg" width="300" height="64" alt="DomainDrift signed observations for banorte.com"> </a>

Ed25519 Receipt

Receipt ID
d74aab4c-6f8a-4aa0-adb6-2d4c7ea5ddc7
Output Hash
5200214a9cf5ad5203ea419eedbc530e428c85177fc87ab75c4d7f763dba270d
Signature
ed25519:930aecb6f11d1bb5bf5cd2208e3c3d5117e527d6d4dd1fba695ebfee6b82c1dd2c0f1bbd2a84230ab7d4f6957ac44cf4b50469e21e8f577779bec5c936683103
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser