Looks like a simple phishing attack. Such things don't happen in crypto services with proper security measures. You have to confirm your transaction at Coinbase with 2factor, your email and an sms all at the same time for example.