Coinbase Cartel URL or Domain IOC Observed in User Click Activity

Syed Usfar Wasim@nCD24

•updated Aug 3, 2026•21•0•13

Detects Microsoft Defender XDR UrlClickEvents where a clicked URL or extracted clicked domain matches known Coinbase Cartel-related URL, onion, messaging, or infrastructure indicators.