System status

● All systems operational

Last checked 2026-11-07 17:55 UTC · auto-refreshes every minute · JSON

Components

Web applicationServing normally

DatabaseConnected

DNS-leak responderOperational

GeoIP intelligenceLoaded · updated 138d ago

HTTPS / TLSValid on all domains

Uptime

Application (since last deploy)5d 9h 35m

Server20d 0h 24m

Availability · 90 days

100.00%

uptime over the last 90 days · checked every 5 min

operationaldegradedoutageno data

No incidents recorded in this window.

Domains & certificates

Both domains serve the same site from the same server, each with its own HTTPS certificate. tools-inter.actor is canonical; 77.tools is a fully-supported alias.

tools-inter.actorprimarycert valid → 2027-01-04

Certificate SHA-25666:5F:11:0A:08:B7:A6:D3:BF:B9:8E:03:1D:DD:55:0E:7D:B9:E3:41:D8:FC:28:C2:87:C8:96:51:AA:13:C6:9C

Public-key pin · SPKI SHA-256 (base64)Yg4gSZOEUfgMyKhIHZBpNTHMzFkAbrxdULMhLB3h8e8=

IssuerLet's Encrypt

Certificate Transparency logs ↗

77.toolsaliascert valid → 2027-01-18

Certificate SHA-2565E:AE:5D:FF:37:DD:C8:5D:4F:16:D8:0B:11:54:90:E5:F3:37:D0:B2:79:8B:26:79:64:20:70:46:FA:D4:4C:07

Public-key pin · SPKI SHA-256 (base64)PYdHEzqnqzkClc8hk7tA7gsohykSL5XgyQa4k55lsvY=

IssuerLet's Encrypt

Certificate Transparency logs ↗

Verify any domain: click the padlock → Certificate, or run echo | openssl s_client -connect <domain>:443 2>/dev/null | openssl x509 -noout -fingerprint -sha256 and compare the SHA-256 above.

Security headers

Sent on every response. Confirm them yourself in your browser’s DevTools → Network → Response Headers.

HTTPS enforced (HSTS)max-age=31536000; includeSubDomains

Content Security Policyactive

Clickjacking protection (frame deny)DENY

MIME-sniffing protectionnosniff

Referrer policystrict-origin-when-cross-origin

Permissions policygeolocation=(), microphone=(), camera=()

Server software banner hiddenyes

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob:; connect-src 'self' https://*.dns.tools-inter.actor stun:stun.l.google.com:19302 stun:stun1.l.google.com:19302; frame-src https://www.openstreetmap.org; object-src 'none'; frame-ancestors 'none'; base-uri 'self'

Integrity & verification

Homepage integrity hash

SHA-256 of the served homepage (identical on both domains)46:95:66:88:13:BE:6D:51:55:7C:EC:4B:16:40:4B:EC:23:22:95:92:AD:D9:44:B9:0A:E1:41:B2:45:E7:C3:CC

Reproduce it: curl -s https://tools-inter.actor/ | sha256sum (or https://77.tools/) — it should match. Our client code is open source ↗ so you can audit what runs.

What this proves. The TLS fingerprints and Certificate Transparency logs are verified independently of our server, so they reliably catch a man-in-the-middle or a swapped certificate on either domain. The homepage hash detects changes to what we serve — cross-check it against our public source, since a fully compromised server could in theory change both the page and this number.

Host

NetworkContabo · dedicated VPS

LocationOberasbach (Kreutles), Germany

IP address13.140.154.198