It is actually like that, changing the URL name close to the original like Binance and other common cryptocurrency exchanges, wallets and other typical service that we use.
This really exists.
I guess some of you have seen those fake websites that's showing when you use google search and they are even sponsored.
Had that once, it was so freaking legit it even had it pass the details to the real server before requesting for 2FA.
I have read an article(AMA) and shared his experience as a hacker that even you have a 2FA, he will wait for you patiently just for him to gain access to your funds and transfer it quickly.
And that will happen if he has already the right login details of your exchange account and other wallet details.