CONTINUOUS INTERNET TELEMETRY24H DRIFT3,165 material changesacross 2,747 domains · -233 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,314 curated domains not answering-6,404 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,165 material changesacross 2,747 domains · -233 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,314 curated domains not answering-6,404 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 403

s7.ru

Observed 2026-07-13T01:22:48.179Z (4h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Also usesGoogle Search Console
11 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat s7.ru actually stands on - every host below is a signed observation
s7.ru
A / AAAA
155.212.234.239
Cloudflareserves the site
NS
ns2.s7.runs1.edgedns.runs1.s7.runs2.edgedns.world
s7.ru + edgedns.ru + moreanswers its DNS
MX
mxgw03.s7.rumxgw01.s7.ru
s7.rureceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.s7.ru/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1348 ms
DNS resolutionNOERROR
Redirect chain
https://www.s7.ru/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 155.212.234.239

MX 2

  • 10mxgw03.s7.ru
  • 5mxgw01.s7.ru

TXT 20

  • v=spf1 exists:%{i}.spf.s7.ru -all
  • 978d8b96-4c12-4d5a-b116-94642d51ecff
  • 531f554e-c866-47aa-b285-9a5bad1cfb86
  • tci-dcv=caac3c8fbeb5286f76917c303dc7bbaeb9884fe10c3fc0b16c6444a7a4378ca1
  • google-site-verification=o_KlkU8bkdGYQk6nNXPI-ImssabXVAgxp-lNy48imVs
  • ngenix-verification=52cf717c02fae4174251b946248c1e24
  • 0f0ab183-1c78-4376-b080-7d24dec6ca84
  • ae044465-647a-45aa-ba53-b522617cbb90
  • 0e5ea705-04bf-4894-afbb-1790bf29b45f
  • 88fe0039-4d13-4bc7-9d3a-16927f32c776

NS 4

  • ns2.s7.ru
  • ns1.edgedns.ru
  • ns1.s7.ru
  • ns2.edgedns.world

SOA 1

  • ns1.edgedns.co support.edgecenter.ru

CAA 9

  • issuewild letsencrypt.org
  • issuewild harica.gr
  • issue globalsign.com
  • issue harica.gr
  • issue amazon.com
  • issue tlscc.ru
  • iodef mailto:admin@s7.ru
  • issuewild tlscc.ru
  • issue letsencrypt.org

TLS Certificates (0)

None.

Subdomains (11)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for s7.ru. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for s7.ru <a href="https://domaindrift.io/t/s7.ru"> <img src="https://domaindrift.io/badge/s7.ru.svg" width="300" height="64" alt="DomainDrift signed observations for s7.ru"> </a>

Ed25519 Receipt

Receipt ID
53252458-476b-4783-a2b0-87a57f0bacd4
Output Hash
ee2a2bc7f8bd2b96246528e684b26d33ae3326b0818991a625664f19dd6686c9
Signature
ed25519:4fd5bee54c839d3a6a27f97048ffa77f6d59b820ff8bcf289b43ae045f0b6284f4ab71b39d64d38441fa8d8759243237259985586a212646255ee07c83d4b60d
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser