If you've come across report.banorte.glassboxdigital.io and wondered whether it's a legitimate Banorte tool, the evidence points to a strong no. A legitimate banking or financial reporting site should clearly identify the company behind it, provide a privacy policy and terms of use, and offer contact information. This site does none of those things. The homepage shows only 'It works!' — which is the default page for an unconfigured web server. That alone would be odd for any real bank service. When you add the missing security headers that help protect against common web attacks and the acceptance of outdated TLS connections, the technical setup also falls short of what you'd expect from a financial platform. The domain is hosted on Amazon's cloud but the ownership is hidden entirely, and there is no social media presence or public record of this service existing. There are no report.banorte.glassboxdigital.io reviews to learn from because the site has no visible footprint. The most likely explanation is that this domain was registered and set up to look like a legitimate bank reporting portal without actually being one. If you need to report something to Banorte, go directly to their official website or contact them through their published phone numbers. Do not enter any personal information or banking details here.
No — report.banorte.glassboxdigital.io doesn't look safe
In plain English
This site is not safe to trust. It claims to be related to Banorte, a major Mexican bank, but there is no contact info, no legal pages, no owner information, and the homepage just says 'It works!'. That combination is extremely suspicious for anything involving banking or financial data.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site has a valid SSL certificate and uses modern encryption, but it still accepts old TLS 1.0 and 1.1 connections that are known to be insecure. No security headers are set to protect against common web attacks, which is a gap for any site that might collect data.
The WHOIS query returned a malformed request, meaning the actual owner is hidden behind privacy. The domain resolves to Amazon hosting and has no meaningful homepage content beyond 'It works!', leaving it unclear who runs this site.
No blacklist hits or Google Safe Browsing flags are a plus, but the site is not ranked in the top million by traffic and has no Wayback Machine history we could confirm. A clean slate so far but no track record to rely on.
There is no about page, no contact information, no social media presence, and no branding like a favicon. This is an unusually bare setup that makes it hard to know who is behind the site.
No privacy policy or terms of service are present. Since this domain references 'banorte' (a Mexican bank), it likely involves financial services where such legal pages are mandatory. Their absence is a serious compliance red flag.
The site runs on Amazon's cloud with a fast load time, but it lacks basic infrastructure elements like a sitemap, robots.txt, and any email setup. The lack of DNSSEC and security headers is common for small sites but still leaves it less resilient.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.