System status

● All systems operational

Last checked 2026-09-09 13:00 UTC · auto-refreshes every minute · JSON

Components

Web applicationServing normally

DatabaseConnected

DNS-leak responderOperational

GeoIP intelligenceLoaded · updated 79d ago

HTTPS / TLSValid on all domains

Uptime

Application (since last deploy)3h 33m

Server56d 21h 53m

Availability · 90 days

100.00%

uptime over the last 90 days · checked every 5 min

operationaldegradedoutageno data

No incidents recorded in this window.

Domains & certificates

Both domains serve the same site from the same server, each with its own HTTPS certificate. tools-inter.actor is canonical; 77.tools is a fully-supported alias.

tools-inter.actorprimarycert valid → 2026-11-05

Certificate SHA-256E3:A2:85:20:43:B0:40:08:61:D0:D2:07:E8:C6:D0:86:9D:9D:8E:70:4A:BC:F0:97:FE:6F:8F:EB:FA:9D:6B:6F

Public-key pin · SPKI SHA-256 (base64)UIa5w6R0LSvmcCbCilfUTWrn5N2ltqB/7RGXrQk0Df0=

IssuerLet's Encrypt

Certificate Transparency logs ↗

77.toolsaliascert valid → 2026-11-19

Certificate SHA-256A9:D5:6A:B7:51:ED:98:9A:07:6B:89:DA:D9:BE:41:72:C6:59:29:A3:6F:2B:52:BE:4B:1F:1C:D4:34:17:BC:43

Public-key pin · SPKI SHA-256 (base64)58+XWn/Qx5oPNOO7RDh1u5lOojeMe4vj+9mCfnKe4ys=

IssuerLet's Encrypt

Certificate Transparency logs ↗

Verify any domain: click the padlock → Certificate, or run echo | openssl s_client -connect <domain>:443 2>/dev/null | openssl x509 -noout -fingerprint -sha256 and compare the SHA-256 above.

Security headers

Sent on every response. Confirm them yourself in your browser’s DevTools → Network → Response Headers.

HTTPS enforced (HSTS)max-age=31536000; includeSubDomains

Content Security Policyactive

Clickjacking protection (frame deny)DENY

MIME-sniffing protectionnosniff

Referrer policystrict-origin-when-cross-origin

Permissions policygeolocation=(), microphone=(), camera=()

Server software banner hiddenyes

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob:; connect-src 'self' https://*.dns.tools-inter.actor stun:stun.l.google.com:19302 stun:stun1.l.google.com:19302; frame-src https://www.openstreetmap.org; object-src 'none'; frame-ancestors 'none'; base-uri 'self'

Integrity & verification

Homepage integrity hash

SHA-256 of the served homepage (identical on both domains)51:41:5D:81:78:93:DC:92:5A:84:ED:18:2F:78:F4:04:CC:57:C0:F8:E9:87:31:28:25:9E:9F:8C:70:BE:E9:DE

Reproduce it: curl -s https://tools-inter.actor/ | sha256sum (or https://77.tools/) — it should match. Our client code is open source ↗ so you can audit what runs.

What this proves. The TLS fingerprints and Certificate Transparency logs are verified independently of our server, so they reliably catch a man-in-the-middle or a swapped certificate on either domain. The homepage hash detects changes to what we serve — cross-check it against our public source, since a fully compromised server could in theory change both the page and this number.

Host

NetworkContabo · dedicated VPS

LocationOberasbach (Kreutles), Germany

IP address13.140.154.198