knorr.com

Observed 2026-07-12T16:21:29.705Z (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle (SPF sender)

Also usesGoogle Search ConsoleFacebook/Meta

2 subdomains · tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat knorr.com actually stands on - every host below is a signed observation

knorr.com

A / AAAA

20.238.208.21

Cloudflareserves the site

ns3-44.azure-dns.orgns1-44.azure-dns.comns4-44.azure-dns.infons2-44.azure-dns.net

azure-dns.org + azure-dns.com + moreanswers its DNS

relay1i.unilever.comrelay4i.unilever.com

Google (SPF sender)receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.knorr.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time523 ms

DNS resolutionNOERROR

Redirect chain

https://www.knorr.com/

MCP This domain advertises an AI service endpoint at _mcp._tcp.

v=spf1 mx a ptr include:servers.mcsv.net include:_spf.google.com include:amazonses.com include:amazonaws.com include:mail.dms.unileverservices.com -all

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

20.238.208.21

MX 2

100relay1i.unilever.com
200relay4i.unilever.com

TXT 7

google-site-verification=JUmEa5No6vgdv4ZmXu9ouYZyL7dw1iBfORcJMs9B3JY
google-site-verification=tBRn-xJJqOJiaupHx-ELJvk9noBA_PV8i8ImaOK5-oQ
047C-E1BB-834E-9411-BF1C-CEA9-F775-9C90
facebook-domain-verification=mvxxmidr3ydtunrgx7tj1jjktm8ipa
v=spf1 mx a ptr include:servers.mcsv.net include:_spf.google.com include:amazonses.com include:amazonaws.com include:mail.dms.unileverservices.com -all
v=spf1 mx a ptr include:servers.mcsv.net include:_spf.google.com include:amazonses.com include:amazonaws.com include:mail.dms.unileverservices.com -all
v=spf1 mx a ptr include:servers.mcsv.net include:_spf.google.com include:amazonses.com include:amazonaws.com include:mail.dms.unileverservices.com -all

NS 4

ns3-44.azure-dns.org
ns1-44.azure-dns.com
ns4-44.azure-dns.info
ns2-44.azure-dns.net

SOA 1

ns1-44.azure-dns.com postmaster.dns04.unilever.com

TLS Certificates (0)

None.

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what Connor observes and signs for knorr.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/knorr.com">
  <img src="https://domaindrift.io/badge/knorr.com.svg"
       width="300" height="64" alt="Connor signed observations for knorr.com">
</a>

Ed25519 Receipt

Receipt ID: 6df5d41d-652d-4a80-b88d-1d08ae7657e0
Output Hash: e5b149a094646390e65b15a20424a39dd414cd219e402cd3a88312f85567328b
Signature: ed25519:8fa4c68179231a405204243b69c23b927ec1169bcd4cdbb27008fb6eb4a0828985ee8734b82c813fa49c862db91f2b60fd119723ff90dcdd1a009eef4d0f4e03
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/knorr.com