home

files.tomsguidefiles.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain files.tomsguidefiles.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in March of 2015. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Washington, United States (US)

Create date:
Monday, March 23, 2015

Expires date:
Thursday, March 23, 2017

Updated date:
Sunday, February 21, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
tomsguidefiles.com

Whois:
1 tomsguidefiles.com record

The domain files.tomsguidefiles.com has been seen to resolve to the following 118 IP addresses.

52.84.125.129
server-52-84-125-129.iad16.r.cloudfront.net
September 13, 2016

52.84.125.125
server-52-84-125-125.iad16.r.cloudfront.net
September 13, 2016

52.84.125.91
server-52-84-125-91.iad16.r.cloudfront.net
September 13, 2016

52.84.125.48
server-52-84-125-48.iad16.r.cloudfront.net
September 13, 2016

52.84.125.17
server-52-84-125-17.iad16.r.cloudfront.net
September 13, 2016

52.84.125.203
server-52-84-125-203.iad16.r.cloudfront.net
September 13, 2016

52.84.125.200
server-52-84-125-200.iad16.r.cloudfront.net
September 13, 2016

52.84.125.58
server-52-84-125-58.iad16.r.cloudfront.net
August 25, 2016

52.84.125.5
server-52-84-125-5.iad16.r.cloudfront.net
August 25, 2016

52.84.125.225
server-52-84-125-225.iad16.r.cloudfront.net
August 25, 2016

52.84.125.212
server-52-84-125-212.iad16.r.cloudfront.net
August 25, 2016

52.84.125.198
server-52-84-125-198.iad16.r.cloudfront.net
August 25, 2016

52.84.125.175
server-52-84-125-175.iad16.r.cloudfront.net
August 25, 2016

52.84.125.103
server-52-84-125-103.iad16.r.cloudfront.net
August 25, 2016

52.84.125.80
server-52-84-125-80.iad16.r.cloudfront.net
August 25, 2016

52.84.125.173
server-52-84-125-173.iad16.r.cloudfront.net
July 24, 2016

52.84.125.138
server-52-84-125-138.iad16.r.cloudfront.net
July 24, 2016

52.84.125.111
server-52-84-125-111.iad16.r.cloudfront.net
July 24, 2016

52.84.125.109
server-52-84-125-109.iad16.r.cloudfront.net
July 24, 2016

52.84.125.52
server-52-84-125-52.iad16.r.cloudfront.net
July 24, 2016

52.84.125.230
server-52-84-125-230.iad16.r.cloudfront.net
July 24, 2016

52.84.125.181
server-52-84-125-181.iad16.r.cloudfront.net
July 24, 2016

52.84.125.235
server-52-84-125-235.iad16.r.cloudfront.net
July 22, 2016

52.84.125.188
server-52-84-125-188.iad16.r.cloudfront.net
July 22, 2016

52.84.125.164
server-52-84-125-164.iad16.r.cloudfront.net
July 22, 2016

52.84.125.132
server-52-84-125-132.iad16.r.cloudfront.net
July 22, 2016

52.84.125.82
server-52-84-125-82.iad16.r.cloudfront.net
July 22, 2016

52.84.125.37
server-52-84-125-37.iad16.r.cloudfront.net
July 22, 2016

52.84.125.20
server-52-84-125-20.iad16.r.cloudfront.net
July 22, 2016

52.85.131.241
server-52-85-131-241.iad53.r.cloudfront.net
July 18, 2016

 
Showing 30 of 118 IP Addresses

File downloads found at URLs served by files.tomsguidefiles.com.

1 / 68      (Adware)
http://files.tomsguidefiles.com/Minecraft.exe  (9bca24cfcd49d294bcdb118869e54ee3)

0 / 68
http://files.tomsguidefiles.com/flstudio_12.0.2.exe  (e4fa96d5dea996ed0eb5fe91145520de)

3 / 68      (inconclusive)
http://files.tomsguidefiles.com/FreeVideoFlipAndRotate.exe  (d55091bd87191c5f1178c3500873b562)

0 / 68
http://files.tomsguidefiles.com/Fences2-setup.exe  (fences [2.13].exe)

0 / 68
http://files.tomsguidefiles.com/dxwebsetup.exe  (8d0eb216b0081be7b955b50d58f4a20d)

1 / 68
http://files.tomsguidefiles.com/DesktopGadgetsRevived-2.0.exe  (9d2f3e0a572e8c3c8c476c72b91febd1)

0 / 68
http://files.tomsguidefiles.com/iToolsSetup_EN_3.1.8.7.exe  (2bd6a722d4f8c2b23cbd010660e2ee00)

1 / 68      (Adware)
http://files.tomsguidefiles.com/BitLord-Installer.exe  (9ef5c2f7d6f05e725faf667b070c7635)

0 / 68
http://files.tomsguidefiles.com/SafariSetup.exe  (0a5b39a859eb84484d5559a8ba22f736)

0 / 68
http://files.tomsguidefiles.com/AngryBirdsRioInstaller_1.4.4.exe  (69f4ab35dbdfdb6b60d51bbbaf869aac)

0 / 68
http://files.tomsguidefiles.com/War3TFT_126a_English.exe  (0b3b78674bb9331ed2ec605fd26b89b4)

0 / 68
http://files.tomsguidefiles.com/wrar521b1ar.exe  (ff1e4b5c788de2daa76263b16b9d8c7f)

1 / 68
http://files.tomsguidefiles.com/8GadgetPackUninstaller.exe  (e44fe3a6fe645d3c4da44893434c9912)

0 / 68
http://files.tomsguidefiles.com/video-editor_setup_full846.exe  (filmora_setup_full846.exe)

0 / 68
http://files.tomsguidefiles.com/uzcsetup.exe  (a90bb0552bc83cd5a95f558d037bf80a)

0 / 68
http://files.tomsguidefiles.com/AngryBirdsSeasonsInstaller_2.2.0.exe  (0e1028d30dee1118b864691dfe443d20)

0 / 68
http://files.tomsguidefiles.com/Setup7StickyNotesv17.exe  (78d600ed5198f908973d75ee1c0d4ca4)

9 / 68      (PUP)
http://files.tomsguidefiles.com/OrbitDownloaderSetup.exe  (5643803_stp.exe)

2 / 68
http://files.tomsguidefiles.com/ggtranslate.exe  (b4f7385428999a75ffb20ed10442367c)

0 / 68
http://files.tomsguidefiles.com/RazerGameBooster.exe  (Game_Booster_v3.6.0.exe)

The following 166 files have been seen to comunicate with files.tomsguidefiles.com in live environments.

TCP » 52.84.125.173:443
Client.exe

TCP » 54.192.19.158:80
smu.exe (W by Search Module)

TCP » 52.85.142.166:80
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 52.85.142.217:80
se.exe

TCP » 52.84.125.203:443
strummer.exe (Strummer)

TCP » 52.84.125.125:80
se.exe

TCP » 54.192.19.158:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.18:80
jingling.exe

TCP » 54.192.19.228:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 52.85.142.194:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.80:80
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 52.85.142.135:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.158:80
smu.exe (W by Search Module)

TCP » 52.85.142.194:443
messengertime.exe

TCP » 52.84.125.211:443
clearscreenplayerbrowser.exe

TCP » 54.192.19.228:80
uvconverter.exe

TCP » 52.84.125.129:443
browser.exe (Speed Browser by Smart Applications)

TCP » 52.84.125.129:443
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 54.192.19.198:80
interhop.exe

TCP » 52.85.131.252:443
browser.exe (Browser)

 
Latest 20 of 388 files

URL:
http://files.tomsguidefiles.com/

Network:
Amazon Cloudfront

Web server:
nginx/1.6.0

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.