CONTINUOUS INTERNET TELEMETRY24H DRIFT972 material changesacross 885 domains · -664 vs yesterdayDNS DRIFT9 domains changed DNS providertop destination commonmx.com · -8 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination privateemail.com · -4 vs yesterdayNOW35,686 curated domains not answering+21,263 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT972 material changesacross 885 domains · -664 vs yesterdayDNS DRIFT9 domains changed DNS providertop destination commonmx.com · -8 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination privateemail.com · -4 vs yesterdayNOW35,686 curated domains not answering+21,263 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

pepper.ru

Observed 2026-07-14T16:27:33.309Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Also usesGoogle Search Console
4 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat pepper.ru actually stands on - every host below is a signed observation
pepper.ru
A / AAAA
51.250.113.140
Cloudflareserves the site
NS
uma.ns.cloudflare.comlex.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
smtp.google.com
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://pepper.ru/tmgrdfrend/showcaptcha?cc=1&form-fb-hint=1.150&mt=F624DF5561BD72AE6B33627258E42EA092D2489329EFDA140E970BD915A961BBC332A6634EDB2B67811B7FECD62C2DA7FC69769F22C4F0F58272E1C9B3C2DA34DE898D18A00907782EA1C975A324D58A6C96FC45B9F18A7D9E0802F6096A59EDD9C9C1B0318685354C4BD5F41085F8CDEAB4DD2BC4E21166865AD1952579AFC7F6DCE8B1BEA9E751559702CB32C7E61261636E9A0E6F8C4530C2095B43622E1820AFD1B85656DD8A6451609AC3FCC77E2999CC8980461499DA505207DB92CB407D1E710265EFE2424CAED158A57D6C607B42AF9F5B1F2BDC7A00479C092CEF96529A8DE19E08121B1D56A07D2871306612A3&retpath=aHR0cHM6Ly9wZXBwZXIucnUv_effa218c0a2c05c871ac9b19b8d478f8&t=7%252F1784046451%252F347a2ba3f5c708c6ecb31289a462bccc&u=9044866257381229245&s=a68149a69ac3ad304927b06a7480206c
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time901 ms
DNS resolutionNOERROR
Redirect chain
https://pepper.ru/tmgrdfrend/showcaptcha?cc=1&form-fb-hint=1.150&mt=F624DF5561BD72AE6B33627258E42EA092D2489329EFDA140E970BD915A961BBC332A6634EDB2B67811B7FECD62C2DA7FC69769F22C4F0F58272E1C9B3C2DA34DE898D18A00907782EA1C975A324D58A6C96FC45B9F18A7D9E0802F6096A59EDD9C9C1B0318685354C4BD5F41085F8CDEAB4DD2BC4E21166865AD1952579AFC7F6DCE8B1BEA9E751559702CB32C7E61261636E9A0E6F8C4530C2095B43622E1820AFD1B85656DD8A6451609AC3FCC77E2999CC8980461499DA505207DB92CB407D1E710265EFE2424CAED158A57D6C607B42AF9F5B1F2BDC7A00479C092CEF96529A8DE19E08121B1D56A07D2871306612A3&retpath=aHR0cHM6Ly9wZXBwZXIucnUv_effa218c0a2c05c871ac9b19b8d478f8&t=7%252F1784046451%252F347a2ba3f5c708c6ecb31289a462bccc&u=9044866257381229245&s=a68149a69ac3ad304927b06a7480206c

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 51.250.113.140

MX 1

  • 1smtp.google.com

TXT 11

  • _globalsign-domain-verification=CylUisxspPnSzHPATrY-AZYkaAvAtPEr_Kg5ViUmeo
  • detectify-verification=4eff0ffad7883461ac68372bc1fec2cc
  • google-site-verification=KWx-2ytdgjdr_oggjBZ_IgdG31pk57ktR-HoBSA-nsQ
  • google-site-verification=UEfeMsbqZGoBJ3ipdFZlauqRrB9MCGA0ry4eYzQn0Q4
  • google-site-verification=YKH0vWTymfE70z63n4FQJPSEkyo-LWRguwlcEov7t28
  • google-site-verification=cdnDDQ5_ijVwG_9NUHE8PF-88Y0u1iCN2hhOeufYwq0
  • v=spf1 include:_spf.google.com include:amazonses.com include:smtp.groovehq.com include:_spf.yandex.net -all
  • google-site-verification=1AP-RZyhcWU3nqhxAc4KeGx82-6tcaPfOeJ9a8IShEs
  • _globalsign-domain-verification=5d1NVn0i4isLLfHM7EJzAuAuy-rZTPNFPzL3oRTYsJ
  • v=DMARC1; p=reject; pct=100; rua=mailto:dmarc-reports@pepper.ru; ruf=mailto:dmarc-reports@pepper.ru; fo=1

NS 2

  • uma.ns.cloudflare.com
  • lex.ns.cloudflare.com

SOA 1

  • lex.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for pepper.ru. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for pepper.ru <a href="https://domaindrift.io/t/pepper.ru"> <img src="https://domaindrift.io/badge/pepper.ru.svg" width="300" height="64" alt="DomainDrift signed observations for pepper.ru"> </a>

Ed25519 Receipt

Receipt ID
3dfe235a-cb6c-417c-b528-e6b53c171a03
Output Hash
e680201fe6b4a0fdf69ad4417031fe47592bed6f9c459119c0e2229f4d0be591
Signature
ed25519:47f0493f6fcf42bb7ec16f9e1ad94ea8b002ae39796840819b9fdc58be079c7dcc2295ec255294cf67fd77e728f2cef479c3f019c365fb6fa403ad62a3ba2f07
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser