# Fake Airdrop · Drain Watch

2 incidents, 1 live. JSON: https://drains.watch/t/fake-airdrop.json · RSS: https://drains.watch/t/fake-airdrop/feed.xml

- [Noir wallet drainer kit hides its backend behind DNS TXT records and DoH](https://drains.watch/i/noir-drainer-dns-txt-c2-oct-2026) (live, High, Still active, since Oct 9, 2026)
- [Hijacked Arbitrum DAO X account posts fake 'snapshot confirmed' airdrop linking to phishing site](https://drains.watch/i/arbitrum-dao-x-account-hijack-feb-2026) (closed, Medium, Partly contained, since Feb 3, 2026)