Online Safety Protection
-
We care about your online safety and provide protection for your browsing. Our clients can find details on our safety statement and the measures we have implemented.
Whether you're an individual or a business, you should consider online safety in the same way you would consider the physical safety of your home or business. Taking these precautions will not only make you feel more secure but also protect those who visit your business or website. It's important to understand the potential risks and ensure you're fully protected.
- Secured Server and Data Center Introduction
-
Secured Server: The website https://tcmwater.com is hosted on a secured server and in a certified data center. Necessary measures have been taken to guarantee our clients an optimized experience with guaranteed safety, a powerful cloud infrastructure, and optimized features, such as:
Enhanced performance: The hosting environment utilizes professional-grade hardware and routers. The website server is supported by an enterprise-level high-performance SSD (Solid State Drive) in RAID-10 to optimize performance. A solid state drive (SSD) is a high-speed, non-mechanical storage device that uses NAND flash memory to store data, offering faster performance (faster boot and application load times), lower power consumption and heat generation, greater durability (greater resistance to physical shock), and silent operation due to lack of moving parts. Its RAID-10 configuration improves write speed and fault tolerance.
Good SLA level: A 99.9% uptime SLA (Service Level Agreement) for the website and network is guaranteed. We strive to maintain an actual uptime level of 99.90% or better, excluding the offline minutes required for necessary maintenance.
Since August of 2026, we have deployed multiple uptime status monitors to report the website's uptime and downtime. Our clients can expect a reliable network connection and stable services, as we have implemented necessary measures to ensure optimal performance. The uptime status since the monitors were deployed is detailed in the table below:
Service Status and SLA Level Year Yearly SLA level Yearly Offline time 2026 (August 7th–Dec 31st) 
Data Center Introduction: The data center values its clients' trust. According to its official description, it "offers robust infrastructure and connectivity", although it is not typically classified among the largest data center hubs in the United States, "it provides excellent network performance, redundancy, and security for many customers." Its security, network, carriers, power and cooling systems, fire detection and suppression system, and certifications are outlined below:
24/7 Monitoring: Hosting providers monitor all servers continuously to enture IT services operate 24/7/365.
Security: As a security-focused company, the data center prioritizes data and privacy protection, "controlled access, surveillance systems, and redundant infrastructure." These measures work together with redundant infrastructure to ensure equipment is secure and protected. It implements multi-layered physical security: (1) 24×7×365 electronic monitoring (video surveillance with recorded monitoring); (2) Biometric Card access to datacenter facility; (3) On-site security personnel; (4) Advanced fire detection and suppression systems.
Fast and stable network: The website server connects to multiple 1.0 Gbps+ networks, supporting robust network connectivity. The data center offers an excellent connectivity, "low latency and high throughput network access," and the "data center's network is built on a fully redundant native 100Gbps infrastructure with multiple Tier 1 carriers, ensuring low latency and high throughput. It features diverse fiber paths, multiple peering points, and 1Gbps to 10Gbps port options to deliver reliable, fast connectivity." Network performance test results by continent are listed in the table below:
Network Connection by Continent Continent Name Best Response Time Worst Response Time Avg. Response Time Packet Loss Tolerance North America 0.32 ms 78.59 ms 39.45 ms 0% or ≤1% Asia–Europe 82.38 ms 266.44 ms 174.41 ms 0% or ≤1% Central & South America 79.95 ms 150.93 115.44 ms 0% or ≤1% Oceania & South Pacific Islands 207.21 ms 249.1 ms 228.7 ms 0% or ≤1% Africa and Other Areas 183.47 ms 209.57 ms 196.50 ms 0% or ≤1%–2%
Carriers: The data center is a carrier-neutral facility supporting diverse carrier points of entry. Its redundant native 100Gbps network consists of Arelion, Cogent, Crown Castle and GTT, as well as numerous peers. "The network infrastructure is designed to accommodate additional peering arrangements to optimize connectivity and performance."
Power redundancy: The data center has "robust power redundancy to ensure high availability. It features dual power feeds, multiple backup generators, and uninterruptible power supply (UPS) systems to maintain continuous power even during outages. This setup helps keep your services running smoothly without interruption."
Renewable energy: The data center "operates on renewable energy", and is provided by nearby water power station with “reliable and inexpensive hydro-electric power", and "benefits from inexpensive environmentally friendly electric power."
Cooling redundancy: The data center's total cooling capacity is 130 tons, it "employs redundant cooling systems to maintain optimal temperature and humidity levels. It uses N+1 cooling infrastructure, meaning there is at least one independent backup cooling unit available to take over if the primary system fails. This ensures reliable and consistent cooling to protect your equipment."
Fire detection and suppression: The data center is "equipped with advanced fire detection and suppression systems. It includes early smoke detection technology and a clean agent fire suppression system designed to quickly detect and safely extinguish fires without damaging your equipment."
Certifications: The data center holds SSAE 18 Certified colocation certifications, "SSAE 18 is an internationally recognized auditing standard developed by the AICPA."
- Optimized Network Experience:
-
We have deployed relevant acceleration technologies to help our customers optimize bandwidth utilization, increase network throughput, reduce network latency, and maintain lower queue latency under current network conditions, thereby ensuring that our customers enjoy a superior network access experience. Safe browsing and recommendations are introduced as follows:
- Safe Browsing and Security:
-
SSLTrust Verified: The website has been scanned by SSLTrust , a third-party website safety and security scanner. SSLTrust scans public-facing websites and checks their safety by consulting over 60 threat intelligence databases from providers including Comodo, Google Safe Browsing, Avira, CyRadar, Dr.Web, ESET, Sucuri, and Trustwave. It helps users determine whether a website is secure enough to visit and share information with.
Test date: Wednesday, July 29th 2026
Test Result:
①.Malware, Spam, and Trust Report:
Status: Completed. Results: Total Checks: 90; Positive Matched: 0
②.SSL/TLS Report:
Status: Completed. Results:No Issues Found
HTTP/2 Support: The website supports HTTP/2. As stated in official documentation, "HTTP/2 (Hypertext Transfer Protocol Version 2) was developed as an improvement over HTTP/1.1 to enhance web performance and efficiency." It delivers better performance, reduced bandwidth consumption, and a media-rich experience for end users.
Improved web performance for desktop and mobile devices: HTTP/2 was designed for low-latency transport of content over the web. Users benefit from faster access to web content, and the protocol enhances the mobile browsing experience through improved performance and security. All major desktop browsers support HTTP/2: Chrome (v40+), Edge (v12+), Safari (v11+), Firefox (v36+), Opera (v28+). Major mobile browsers also support it: Chrome for Android (v121+), Safari on iOS (v9+), Firefox for Android (v122+), Opera Mobile (v73+), and Android Browser (v121+).
Reduced bandwidth consumption and richer media experience: HTTP/2 enables network operators to lower operational costs while maintaining high-speed internet standards. Features such as HPACK header compression reduce overhead during media-rich content transfer—saving bytes and accelerating delivery.
- Recommendations for browsers and screen resolutions
-
To improve the browsing experience for our fans and clients, we recommend the following browsers for desktop and mobile devices, along with optimal screen resolutions:
Browsers for desktop Browser and Introduction Lowest Version Supporting HTTP/2 Recommended Version for Enhanced Security (e.g., HTTPS-Only Mode or Equivalent) 
Chrome v40–v50+, latest recommended [✔] HTTPS-Only Mode supported from v93+ [✔] Chrome is a fast, efficient browser that enhances system security by isolating each site and application in a sandboxed environment. 
Microsoft Edge v12–v18+, latest recommended [✔] “Automatic HTTPS” enabled by default from v92+ Microsoft Edge shares the Chromium engine with Chrome and integrates with Windows Defender to protect against threats and malicious software. 
Firefox v36–v52+, latest recommended [✔] HTTPS-Only Mode supported from v76 and v83+ [✔] Firefox is a high-performance, privacy-focused browser with rapid updates, strong security, and broad compatibility. 
Waterfox G6.0.19+ [✔] HTTPS-Only Mode supported in G6.0.19 and later versions [✔] Waterfox is built on the Firefox source code and engine, with additional optimizations for performance and privacy. 
Opera v28–v37+, latest Opera One recommended. [✔] “Always use secure connections” available in security settings. Opera is a cross-platform browser (Windows, Linux, macOS and other systems) developed by Opera Software ASA—known for speed, compact size, and strong web standards compliance. 
Safari v11–v17.2+, latest recommended [✔] Automatic HTTP→HTTPS upgrade enabled by default since Safari 15 on macOS Monterey, Big Sur, and Catalina. Safari is Apple’s native browser for macOS, iOS, and iPadOS. While discontinued on Windows, current versions run exclusively on Apple platforms.
Mobile Browsers Browser and Introduction Lowest version for HTTP/2 support Recommended version (supports HTTPS-Only mode) Chrome for Android Version 121+ [✔] Chrome for Android supports setting “Always Use Secure Connections” in its “Privacy and Security” settings; enable it to use HTTPS-Only mode. Firefox for Android Version 122+ [✔] Firefox 76 and later versions support HTTPS-Only mode. Waterfox for Android Version 1.0.0+ [✔] HTTPS-Only mode is enabled by default in Waterfox for Android. Safari on iOS Version 9–17.2+ [✔] Opera Mobile Version 73+ [✔] Android Browser Version 121+ [✔]
Screen Resolutions for Browsing Devices and Recommendations Lowest Resolution Recommended Resolutions Desktops and Laptops 1024×768 1152×864 or higher Tablets iPad (768×1024), Nexus 7 (600×960) iPad Pro (1024×1366), Nexus 10 (800×1280), or higher Smartphones 320×480 360×598 or higher
- TLS Certificate Security by DigiCert:
-
The website was tested using the third-party SSL scanner from Digicert scan: a powerful tool for verifying SSL/TLS certificate installation and security posture. It validates details including issuer, serial number, signature algorithm, supported protocols and ciphers, and more.
Test date: Wednesday, July 29, 2026
Test Result:
TLS Certificate is correctly installed: Congratulations! [✔]
HTTP Server Header: nginx [✔]
DNS resolves:successfully [✔]
TLS Certificate is valid [✔]
TLS Certificate expiration date is valid [✔]
Certificate Name matches tcmwater.com: [✔]
Heartbleed vulnerability is not present [✔]
TLS Certificate has not been revoked: [✔]
Protocol Support: TLS 1.2 and TLS 1.3[✔]
TLS ciphers supported by the server: TLS 1.2 and TLS 1.3[✔]
Detailed test results are available at:Rescan Pro scan report
- Antivirus Safety Scan by VirusTotal:
-
The website was scanned using a third-party SSL Scanner VirusTotal: a service that analyzes URLs and domains with over 70 antivirus engines and URL/domain blacklisting services, plus advanced content signal extraction tools.
Test date: Wednesday, July 29, 2026
Test Result:
[Clean]: Abusix, Acronis, ADMINUSLabs, AICC, Avira, AlienVault, alphaMountain.ai, Antiy-AVL, Artists Against 419, …
[Clean]: BADWARE.INFO, benkow.cc, BlockList, BitDefender, …, Web Security Guard, Webroot, ZeroCERT;
[Unrated]: 0xSI_f33d, AutoShun, Bkav, Cyan, Lumu, Netcraft, PhishLabs, PrecisionSec, SafeToOpen, URLQuery, VIPRE, etc.
Detailed test results are available at:VirusTotal scan report
Edit date:
