Online Safety Protection.

Online Safety Protection  
 We care about your online safety and provide protection for your browsing. Our clients can find details on our safety statement and the measures we have implemented.

 Whether you're an individual or a business, you should consider online safety in the same way you would consider the physical safety of your home or business. Taking these precautions will not only make you feel more secure, but it will also protect those who visit your business or website. It's important to understand the potential risks and ensure you're fully protected.

Secured Server and Data Center Introduction:


 Secured Server: The website https://tcmfans.club is hosted by a secured server and data center. Necessary measures have been taken to guarantee our clients have an optimized experience with guaranteed safety, a powerful cloud infrastructure, and optimized features, such as:

 NVMe SSD drive in RAID-10Enhanced performance: The hosting side utilizes professional-grade hardware and routers. The website server is supported by an enterprise-level NVMe SSD drive (Solid State Drive) in RAID-10 to optimize performance. NVMe is a storage protocol that is optimized for NUMA (Non Uniform Memory Access); it has enhanced performance and is highly scalable. Its RAID-10 storage improves write speed and fault tolerance.

 Good SLA level: 99.9% uptime SLA (service level agreement) availability for the website and the network is guaranteed. We strive to maintain a real uptime level of 99.90%, or better, excluding the offline minutes of necessary maintenance.

 Uptime Status Monitor Since March 2020, we have set up several uptime status monitors to update the website's uptime and downtime status. Our clients can expect a reliable network connection and enjoy stable services, as we have taken the necessary measures to ensure optimal performance. The uptime status since the monitors were set up is listed in detail in the table below:
 

Service Status and SLA level
YearYearly SLA levelYearly Offline time 
2019. Not tested Not tested
2020(Mar 23rd~Dec 31st) 99.974% 1 hour, 41 minutes and 26 seconds.
2021 99.90% 9 hours, 56 minutes 4 seconds.
2022 99.797% 17 hours, 45 minutes 16 seconds.
2023 99.860% 12 hours, 13 minutes and 27 seconds.
2024 99.983% 1 hours 26 minutes and 15 seconds.


Secured Server and Datacenter Data Center Introduction: The data center cares about its clients' trust; According to the introduction, it is "one of the largest and most connected data center hubs in the United States." Its security, network, carriers, power and cooling systems, and certifications are introduced:

 24/7 Monitoring: The Hosting monitors all servers. They ensure that IT services are running 24/7/365.

 Security: As a security-focused company, the data center's top priority is data and privacy protection. It has taken the following measures to guarantee security, including (but not limited to): ①.24x7x365 onsite security personnel and video surveillance cameras; ②.Key Card Access System; ③.access to elevators and data center is restricted and controlled via HID contact-less access control system; ④.FM 200 fire suppression system, etc.

 Network at DatacentreFast and stable network: The website server is connected to multiple 1.0G+ networks, which support fast and stable connections. The data center offers a "direct peering and improved network performance to hundreds of facilities on the West Coast.", and "redundant dark-fiber connects each building and divergent paths ensure unparalleled network reliability.", and "delivers direct connections to companies across Southern California but also low latency, high-availability connectivity routes to key cities around the world." The network conditions for the continents from the tests are listed in the table below:
 
Network Connection of Continents
Continent NameResponse time (Best)Response time (Worst)Response time (Average)Loss Tolerance (Packet Loss Rate)
North America: 0.75 ms 76.62 ms 30.36 ms 0% or ≤1%
Europe-Asia continents: 99.65 ms 258.95 ms 139.71 ms 0% or ≤1%
Central-South American: 59.21 ms 124.66 ms 116.44 ms 0% or ≤1%
Oceanica and south Pacific Islands: 133.83 ms 161.88 ms 143.4 ms 0% or ≤1%
Other Areas: 177.79 ms 301.73 ms 221.91 ms 0% or ≤1%~2%


 fast networkCarriers: The data center is a carrier-neutral facility that supports diverse carrier points of entry. It supports various well-known carriers, such as CenturyLink, Cogent, GTT, and NTT, as well as peers.

 Power redundancy: The critical infrastructure is protected by reliable and fault-tolerant 2N+1 power infrastructure. It is backed up by a redundant UPS system with 2N+1 redundancy and redundant diesel generators in the event of prolonged power outages. The infrastructure has dual power grids.

 Cooling redundancy: The data center uses a software-controlled cooling system. Eleven HVAC units are in use, and two sets of HVAC units are controlled by automated software.

 Fire detection and suppression: The data center is protected from fire. It uses an FM 200 fire suppression system.

 SOC2, PCI, HIPAA colocation certificationsCertifications: The data center has been certified with the SOC2 collocation certifications, PCI, HIPAA, the SOC Reports (Service Organization Reports) are used to assist service organizations “that operate information systems and provide information system services to other entities, build trust and confidence in their service delivery processes and controls through a report by an independent Certified Public Accountant.”
 

Safe Browsing and Security:


SSLTrust scan SSLTrust Verified: The website is tested by a third-party website safety & security scanner SSLTrust ; It can scan public-facing websites and check their safety by consulting over 60 databases from companies such as Comodo, Google Safe Browsing, Avira, CyRadar, Dr.Web, ESET, Sucuri, and Trustwave, etc. It helps determine whether a website is secure enough to visit and share information with.

 Test date:Fri, 2 December 2022
  Trust ReportTLS Report
Test Result:
 ①.Malware, Spam, Trust Report:
 Status: Finished. Results: 90 Tests Complete, 0 Positives.
 ②.SSL/TLS Report:
 Status: Finished. Results:No Issues Found.


HTTP2:hypertext transfer protocol version 2 HTTP2 Support: The website supports HTTP/2; according to introductions, "HTTP/2 (Hypertext Transfer Protocol version 2) was developed as an improvement over the previous HTTP/1.1 version to enhance web performance and efficiency." It provides web users with better performance, cheaper internet, and a media-rich experience.

 HTTP2 is supported Better web performance for both desktop and mobile devices: HTTP/2 was developed for low-latency transport of content over the web. Users can access web content faster, and the protocol optimizes the web experience for mobile users by providing better performance and security. All major desktop browsers support it: Chrome (40~50+), Edge (12~18+), Safari (11~17.2+), Firefox (36~52+), Opera (28~37+), etc, and it is supported by the main versions of the major mobile browsers: Chrome for Android (121+), Safari on iOS (9~17.2+), Firefox for Android (122+), Opera Mobile (73+), Android Browser (121+), etc.

 Cheaper Internet and media rich experience: HTTP/2 enables telecom operators to reduce expenses while maintaining high-speed internet standards; features of it (such as header compression) reduce a few bytes from the resource-consuming media-rich content transfer, and deliver it faster.
 

Broswer Recommendation:


 To improve the browsing experience for our fans and clients, we recommend the following browsers for desktop and mobile devices:
 

Browswers for desktop
Broswer and IntroductionLowest version for HTTP2 supportRecommended version for better security (supports HTTPS-Only mode or similar mode)
chrome icon Chrome  Version 40 ~ 50+, to latest. [✔] HTTPS-Only mode: Chrome 93+ versions support [✔]
 Chrome is a simple, efficient browser designed to further improve system security by restricting each site and application to a closed environment.
edge icon Microsoft Edge  Version 12 ~ 18+, to latest. [✔] Edge 92+ and later versions supports "Automatic HTTPS" setting.
 Microsoft Edge has the same underlying technology as Chrome and is based on the Chromium engine, which, together with Windows Defender, protects you from threats and dangerous programs.
firefox icon Firefox  Version 36 ~ 52+, to latest. [✔] HTTPS-Only mode: Firefox 76, 83+ versions support [✔]
 FireFox is an excellent web browser with fast version updates and excellent performance in terms of speed, privacy protection, security and compatibility.
waterfox icon Waterfox  Version G6.0.19 [✔] HTTPS-Only mode: Waterfox G6.0.19 Latest + versions support [✔]
 Waterfox is based on the Firefox source code and engine, and integrates additional optimizations for higher performance and better privacy protection.
opera icon Opera  Version 28 ~ 37+, to latest Opera One. [✔] Opera supports "Always use secure connections" in its security settings.
 Opera is a browser developed by Norwegian Opera Software ASA, support for Windows, Linux, Mac and other systems, opera is fast, small and has a better standards compatibility.
safari icon Safari  Version 11 ~ 17.2+, to latest. [✔] Safari supports automatically switching sites from HTTP to HTTPS if available. The feature is enabled by default with Safari 15 on macOS Monterey, macOS Big Sur, and macOS Catalina.
 Safari is a browser in Apple's computer operating system MacOS, designated for iOS on iPhone phones and iPad tablets, and supports the Windows platform.

 
Mobile browswers
Broswer and IntroductionLowest version for HTTP2 supportRecommended version (support HTTPS-Only mode)
Chrome for Android Version 121+ and later. [✔] Chrome Android supports setting “Always Use Secure Connections”, in its "Privacy and Security" tab, and need to turn on it for support.
Firefox for Android Version 122+ and later. [✔] Firefox 76,83+ versions supports:HTTPS-Only mode
Waterfox for Android Version 1.0.0 and later. [✔] HTTPS-Only mode is automatically enabled in Waterfox for Android.
Safari on iOS Version 9 ~ 17.2+ and later. [✔] 
Opera Mobile Version 73+ and later. [✔] 
Android Browser Version 121+ and later. [✔] 

 
Screen resolutions for Browsing
Devices and RecommendationLowest resolutionRecommended resolutions
Desktops and laptop resolutions 1024x768.  1152x864, or higher resolutions.
Tablet resolutions iPad (768x1024),Nexus 7 (600x960).  iPad Pro (1024x1366),Nexus 10 (800x1280), or higher resolutions.
Smartphone resolutions 320x480.  360x598, or higher resolutions.
TLS Certificate Security by DigiCert:


digiCert scan The web site is tested by a third-party SSL Scanner Digicert scan: It is a fantastic tool for checking the installation and security of SSL certificates. It verifies details such as the issuer, serial number, signature algorithm, protocol, ciphers, and more.

scan result from digicert scan Test date:Wednesday, 17th July 2024
 Test Result:
 TLS Certificate is correctly installed: Congratulations! [✔]
 HTTP Server Header: nginx [✔]
 DNS resolves: [✔]
 TLS Certificate: [✔]
 TLS Certificate has not been revoked: [✔]
 TLS Certificate expiration: [✔]
 Certificate Name matches tcmfans.club: [✔]
 Heartbleed Vulnerability: [✔]
 TLS Certificate has not been revoked: [✔]
 Protocol Support: TLSv1.2, TLSv1.3[✔]
 TLS ciphers supported by the server: TLSv1.2, TLSv1.3[✔]

 The test results in details is available at:Test report from Rescan Pro scan
 

Antivirus Safety Scan by VirusTotal:


virustotal scan The web site is tested by a third-party SSL Scanner VirusTotal: It inspects items with more than 70 antivirus scanners and URL/domain blacklisting services, as well as a myriad of tools for extracting signals from the studied content.

scan result from virustotal Test date:Wednesday, 17th July 2024
 Test Result:
 [Clean]: Abusix,Acronis,ADMINUSLabs,AICC,Avira,AlienVault,alphaMountain.ai,Antiy-AVL,Artists Against 419...
 [Clean]: BADWARE.INFO,benkow.cc,BlockList,BitDefender,...Web Security Guard,Webroot,ZeroCERT;
 [Unrated]: 0xSI_f33d,AutoShun,Bkav,Cyan,Lumu,Netcraft,PhishLabs,PrecisionSec,SafeToOpen,URLQuery,VIPRE,etc.
 The test results in details is available at:Test report from VirusTotal
 

 Edit date:
   cool hit counter