clothes.surf

Classification: Malicious

clothes.surf is a malicious hostname. Linked to Smoke Loader malware. Reported by ThreatFox Abuse.ch (SmokeLoader), last seen 2021-12-06.

Current activity

Online — resolving/reachable. Last checked 2026-10-17 20:37:13.

MITRE ATT&CK associations

Malware families: SMOKE LOADER (S0226)

Blacklist sightings

Description	Source	First seen	Last seen	Labels	MITRE ATT&CK
Top Popularity Site	Cisco Umbrella	2024-07-28 11:15:02	2025-05-11 18:13:48	benign
SmokeLoader	ThreatFox Abuse.ch	2021-12-04 06:53:54	2021-12-06 00:07:17	malicious-activity	S0226 Smoke Loader

Tags

dofoil sharik smoke smoke loader

IP addresses resolved by this hostname

8.8.8.8 (2021-12-05 00:05:08)
34.41.139.193 (2026-09-15 16:30:38)
2600:1900:4001:96e:8000:0:949b:b0cf (2026-09-15 16:30:38)
3.250.92.156 (2026-10-17 20:37:13)

Whois information

AS name: AS15169 Google Inc.
Domain: clothes.surf
TLD: surf
First indexed: 2021-12-05 00:05:08
Last updated: 2026-10-17 20:37:13