# Drainer-as-a-service · Drain Watch

3 incidents, 2 live. JSON: https://drains.watch/t/drainer-as-a-service.json · RSS: https://drains.watch/t/drainer-as-a-service/feed.xml

- [Noir wallet drainer kit hides its backend behind DNS TXT records and DoH](https://drains.watch/i/noir-drainer-dns-txt-c2-oct-2026) (live, High, Still active, since Oct 9, 2026)
- [Report: Inferno/AngelFerno drainer still active in 2026, bought Purple Drainer in March](https://drains.watch/i/inferno-angelferno-drainer-still-active-oct-2026) (live, Critical, Still active, since Mar 1, 2026)
- [Aerodrome and Velodrome front-ends hijacked via DNS, cloned sites serve Eleven Drainer](https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025) (closed, Critical, Contained, since Nov 21, 2025)