I received an email from what I thought was Coinbase last night and if it weren't for my skeptical mind, I would have had my account compromised. The only difference I noticed was that the sender was 'Coinbase' (with single quotes) vs Coinbase (no quotes). I have reported this to Coinbase customer support, but I figured I would reach people quicker if I posted here as well.
Screenshot of email.
Fake email: secure13040@coinbase.com
Link in "Review Our New User Agreement" is
(Click link at your own risk, I did not click it.)
http://pemuotzdos.antakyali.net/.rc/?agreement=view_pEmuoTZDoS&id=myemailaddress@aol.com
Here is a real email from Coinbase.
Real Coinbase email: contact@coinbase.com