S7 Airlines website won’t open: a bot check, not a country block

If you open the S7 Airlines website from abroad and, instead of a flight search, see a spinning loading icon or a white page that says “Forbidden,” that doesn’t necessarily mean the airline has closed s7.ru to foreign addresses. In our October 10, 2026 measurements, the home page responded everywhere with a check for automated requests: in Russia, the Netherlands, Germany and Kazakhstan. Below: what this check is, where else to buy an S7 ticket and how to pay for it, and what a Russian IP changes.

Why the S7 website won’t open: the same check abroad and in Russia

The website doesn’t show a connection error or say anything about blocking by country; it responds with a check page. When our server abroad requested www.s7.ru, it got code 200, but instead of the website, an almost empty page: a loading indicator, a hidden window for a captcha, and a script from servicepipe.tech that checks the browser. If JavaScript is turned off, the page sends you to a service address. Globalping probes got another version of the same protection: a short “Forbidden” page with code 403, the request time, an IP address, a request number and the line “If you are not a bot, please copy the report and send it to our support team.”

Servicepipe is a company that builds protection for web applications, websites, mobile apps and APIs against DDoS attacks and bots (CNews, September 21, 2026). The airline has not explained why it turned on this check or what signals it uses: we found no official statements about it.

There is a general explanation from the Russian Ministry of Digital Development (Mintsifry). In April 2026, the ministry stated that Russian online services reliably open from foreign IP addresses. Exceptions, it said, happen when developers detect a large-scale DDoS attack and briefly restrict traffic from abroad; individual countries or providers that block Russian services can also get in the way (Interfax, April 27, 2026). Whether this applies to S7 is unknown.

How the S7 case differs from bank websites: s7.ru uses a Let’s Encrypt certificate, which every probe accepted. There is no insecure-connection warning here like on websites with the ministry’s certificate; that error is covered in our article what the certificate warning on Russian bank sites means.

Measurements on October 10, 2026: Russia, Europe, Kazakhstan

Our request went only to the www.s7.ru home page: we did not search for tickets, log in to an account or pay for anything. Times are UTC; network types (home or data center) are as labeled by Globalping.

How to buy an S7 Airlines ticket abroad if the website won’t let you in

• The iPhone app. It has returned to the App Store more than once under other names: on August 25, 2025 as “Uchebnik puteshestviy” (“Travel Textbook”) (RIA Novosti, citing S7’s Telegram channel), and in January 2026 as “Uznay Sibir” (“Discover Siberia”). The airline wrote at the time: “We’ve released a new app — update before it gets removed” (iXBT, January 13, 2026). S7 posted links to the App Store and to a download page for Android in its Telegram channel on January 19, 2026.
• The Android app. RuStore lists “S7 Airlines: vashi puteshestviya” (“S7 Airlines: Your Travels”) by S7 Travel Retail LLC, version 6.0.0, updated on October 8, 2026. According to its description, you can buy a ticket, check in for a flight and get a boarding pass in it. Google Play in Germany lists “S7 Airlines: happy travels” by the developer S7 Techlab, updated on October 6, 2026, with more than a million installs; its description mentions buying tickets, online check-in and a boarding pass.
• Agencies. S7 tickets are also sold by third-party services: Tutu.ru and Agent.ru, for example, have pages for the airline, and both mention paying by bank card.

We did not test the apps or agencies from abroad, so we don’t call them a solution. If you are in a hotel, Mintsifry suggests trying a local operator’s mobile internet instead of the hotel Wi-Fi. Another carrier’s website returns a similar check page; see our article Aeroflot not opening abroad.

Paying for an S7 ticket: a Russian or a foreign card

We were unable to open S7’s official page on payment methods: it sits behind the same check. So we rely on what is known from public sources.

• A card from a foreign bank. Visa said on March 5, 2022 that its cards issued by financial institutions outside Russia would no longer work in the country, and Mastercard said that such cards would not work at Russian merchants or ATMs. S7 is a Russian airline, so a Visa or Mastercard from a foreign bank will most likely not go through on its website.
• A card from a Russian bank. In June 2022, S7 added Yandex Pay to its apps and said the service works with Mastercard, Visa and Mir cards of any Russian banks (press release on AK&M). We have no more recent official information on payment methods.

Try a Russian address: 7 days free

Via Liberum VPN’s Russian location, on October 10, 2026 at 23:17 UTC, we requested www.s7.ru and s7.ru with software that doesn’t execute JavaScript. The result matched what our server abroad sees: code 200 and, in place of the website, a page that checks the browser. So in this measurement a Russian address did not remove the check itself, and we don’t know whether your browser will pass it.

A Russian IP is worth checking if it’s precisely your foreign address that keeps you out, for example in the app or at the payment step: we didn’t test those. It costs nothing to try, and it may work in your case. To do so, open the Liberum VPS bot in Telegram, start the trial (7 free days, no card to link), pick 🇷🇺 Россия (“Russia”) from the list of countries, load the subscription link from the bot into Happ or a similar app, connect, and open the S7 app or s7.ru (on the website, let the check finish). All customers of this location share one Russian address. More details are on the page a Russian IP address for Russians living abroad.

What we can’t promise

• That the check will disappear with a Russian IP. The request through our Russian location received the same page as our server abroad, and the probes in Russia received the same “Forbidden” page as those in Europe and Kazakhstan.
• That your browser will pass the check. We requested the website with programs that don’t run JavaScript; we never tried a regular browser.
• That the app and payment will work. We tried neither the S7 app nor buying and paying for a ticket.
• That S7’s rules place no restrictions on VPNs. The pages with the rules on s7.ru did not open for us, so we don’t know what they say about VPNs.
• That everything will stay as it is now. These are results for October 3–10, 2026, and the website’s protection settings can change.

Key takeaways

• To programs without JavaScript, the S7 website responds with a ServicePipe check page both from Russia and from abroad; we did not test an ordinary browser.
• On October 10, 2026, the same “Forbidden” page reached probes in Russia, the Netherlands, Germany and Kazakhstan: the country didn’t change the response.
• With Liberum VPN’s Russian location, our JavaScript-less program hit the same check as our server abroad.
• You can look for a ticket in the S7 app (in the App Store in January 2026, “Uznay Sibir”; in RuStore, “S7 Airlines: vashi puteshestviya”; in Google Play, “S7 Airlines: happy travels”) or through agencies; we did not test them from abroad.
• Visa and Mastercard cards from foreign banks don’t work in Russia, according to statements by the payment systems themselves from March 2022.
• A Russian IP can be tested free of charge for 7 days, but there’s no guarantee of the outcome.