How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

When a Wallet Drainer Asks DNS Where to Go

calendar_today October 9, 2026 person Infoblox Threat Intel domain infoblox

How the Noir kit uses DNS TXT records and DoH as a dynamic infrastructure control plane Executive summary We found a cryptocurrency wallet-drainer kit, self-branded as Noir, that uses DNS TXT records to locate its hosted pool; currently these run on Cloudflare Pages. The loader races three public DNS-over-HTTPS (DoH) services and uses the first […] The post When a Wallet Drainer Asks DNS Where to Go appeared first on Infoblox Blog .

open_in_new Read original post