Looks to me more like a malware that changes the address in the web page you used at Coinbase. That particular wallet address shows up on the internet in the strangest places:

Alameda County Foreclosure listings:

https://www.propertyshark.com/mason/CA/Alameda-County/Trustees-Sales

Some random Wordpress blog:

https://supportantivirusblog.wordpress.com/2017/05/26/13aqmiworwr6grdfzswq1tdxdn9qkhwapd/

Here's a post on a different forum talking about a similar situation involving the exact same wallet:

https://steemit.com/bitcoin/@anubhav/bitcoin-virus-bug-hack-worm-steemitians-you-are-been-warned

It seems more likely that you have a virus or something that changes the wallet address. The *exact* wallet address you quote shows up in a web page for Alameda County Foreclosure listings!!

https://www.propertyshark.com/mason/CA/Alameda-County/Trustees-Sales

Perhaps a malware is fetching a rotating address from there or something along those lines.

I can't be arsed to read this entire thread. Has it been pointed out yet, that at $380 profit on $3000 every 2-day cycle, it would take the OP himself only 31 days (15.5 cycles) of profit reinvestment to reach the ceiling of $20,000 at which this scheme apparently caps out?