Bitcoin Forum

I used the "bitcoin address request" to get a bitcoin, I used a proxy, and after a few hours the proxy expired and my laptop has restarted, I used another proxy, and when IP changed and I logged back into my wallet, it generated another address bitcoin request, and the funds received on the previously generated address are no longer recognized by my wallet..
(https://www.[Suspicious link removed]/btc/address/13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4) , this is adress generated first time, and the btc is there. block explorer shows that the funds arrived at the address specified as expected, but the transaction does not appear in my Blockchain wallet’s transaction history.

My wallet don't show me the adress (13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4) at "Used Addresses" , don't show me the transaction at  "Extended Public Key", why if this adress has generated from my wallet?  ??? ???

How long ago did you send that transaction? Considering the last transaction to that address was about 7-8 days ago?

Can you share your extended public key so I can have a look and see what's there.

Also, how trusted is your VPN, is there a chance they could have redirected you to a different site to steal the money?

The transaction was made on July 4, xpub6BqZb75b73yVa7ggtoeVAmUXQG17G2Vb4ews5NkQh8pEqXPobBzB1r16uUZ9oyXjUyLSWFMo7yH LZuj98mvToSiCAzFC1ZemUcXdX3c58KH , but don't show the transaction..
I created the wallet at www [Suspicious link removed] ..

Can you pm me the exact website where you make a bitcoin wallet it's always suspicious link on my side.
And could clarify this (I used the "bitcoin address request" to get a bitcoin)

I hope that you are using a unique IP or Proxy not a shared Proxy because there is possibility that someone can remotely paste other bitcoin address when sending bitcoin.

I used Ip unique, but it expired and I used another one after that. I created the wallet at official site blockchain..

Your IP doesn't influence with your wallet addresses. If you logged to the right wallet, the address should be valid and the transaction should show up.

OP, are you sure that you own this address? Did you double check in the "Receive" tab when sending it to whoever sent you the coins? Maybe your computer is infected with a Clipboard Hijacker that changes the address in your clipboard to the hacker's one?

I'm pretty sure I owned this address, I don't know if I was hacked.

I think even he is infected with clipboard Hijacker or something, since he said he use the "bitcoin address request" he should receive a notification with pending request to pay the amount of bitcoin that he ask.

I think the wrong here if he actually owns the bitcoin address he should receive it.

Could you try to re-login again with incognito mode and try.
What I see here is that you pasted a wrong payment request link? I tried to use the request payment from blockchain and I tried to use the giving link but it didn't work.

Look at this image below this is what I'm talking about you use?
https://i.imgur.com/UJjG9UN.png

It does not work .. nothing goes ... I'm desperate .. :( >:(

When did you create this wallet on blockchain.info? Did you create it recently (last couple of weeks)... or have you been using it for some time (over a year)?

I created my wallet on July 3 or 4, and the first "request" address was the one that she no longer recognizes.

Can you look up all the addresses you have on your wallet on explorer and see if there is any balance on any of them? I think users above are right, you probably got hit by a malicious script that replaces the wallet address with that of the hijacker. You've got to all related addresses here so users can help identify what went wrong, and transaction IDs.

Maybe screenshot the url you created the wallet at as well, your links are always removed by the forum.

You can see the pictures here: https://imgur.com/a/f1F32U0 (https://imgur.com/a/f1F32U0) , you can clearly see that bitcoin is mine..
I created my wallet, I copied the address from my wallet to request bitcoin. I used coin mixer, I pasted the adress in output adress. I used the same method many times, but I never had problems.

13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4 (https://www.blockchain.com/en/btc/address/13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4) was used a year ago already. This address now holds 0.11923343 BTC.
If you didn't use it last year, someone else owns that address.

I see 39ShybSnGV9H5JdUics4NdkEMpZvk1vad7 (https://www.blockchain.com/en/btc/address/39ShybSnGV9H5JdUics4NdkEMpZvk1vad7) on your screenshots. This address is now empty.

Which mixer did you use? Did you receive a Letter of Guarantee? If so, can you PM it to me for verification?
Coinmixer.se, it already shows in the screenshots. Note that this now links those addresses together, so any past or future mixing on those addresses is no longer private.

---

I think it's either clipboard hijacking (most likely from what you told us), a man in the middle attack through your proxy (I would expect your browser to warn you if the ssl certificate changes), or a bug in Blockchain.

Did I lose the bitcoin?

Did you make this (https://www.blockchain.com/en/btc/tx/906f4c0beed56d2ac505739cc892fde3bc2b3b4c5defefa85fb67f86da426f78) transaction on July 11, 2017?

I don't think you did. It's a 32817 bytes transaction, with many inputs. I would guess it's a scammer consolidating his 2 Bitcoin "revenue" from his clipboard hijacker virus.
If that's the case, than unfortunately you lost your Bitcoins. That would also mean your computer is compromised and shouldn't be trusted anymore.

I make this transaction on July 3, 2017

When I click on the address and copy it, when I stick it I give the address 13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4, although on request is another. Is this a virus?

Yes :( I'm sorry to confirm your money is gone.

See for example https://techcrunch.com/2018/07/03/new-malware-highjacks-your-windows-clipboard-to-change-crypto-addresses

It doesn't help you now, but in the future: you shouldn't trust copy/paste, but always check if it produces the correct address. Even checking just the first digits isn't enough, you should do a thorough check.

Yes. You should either run several virus scanners (bitdefender, malwarebytes) and malware removal utilities (like spybot, malwarebytes etc) or... format your computer and reinstall the Operating System. Personally, I'd recommend the format+reinstall method.

If your computer is infected with the clipboard hijacker, it's possible it also has keyloggers (can harvest usernames/passwords etc) and possibly even Remote Access Tools (RATs) that could allow hackers to copy files directly from your computer. So, you should consider your computer totally compromised and avoid doing any "sensitive" work on it (accessing internet banking or other secure websites etc)


Unfortunately, I would have to say yes :-\

I wouldn't even bother with a virus scan at this point.
Reinstall the OS completely and format your drive.
Then remember to use an antivirus on it - if you want to recover from a backup, scan that backup for viruses also (most av scanners will be able to scan ISO/vhd/zip files) although I'd suggest dong the scan on the media on a different device.

^This is actually the only way to get safely rid of all kind of malware from your system (assuming it is not a root kit, which it isn't in most cases).
In case of it being a rootkit a reinstall won't help, but since most of these BTC stealing malwares are made by some 17y old script kiddies, the chances are very low. So you should be good to go with a complete format/reinstall.




This is so important.
Change every(!) password you have entered on your PC in the last days/weeks/months (obviously not from your current infected system).

Usually it is not just a clipping malware, but a trojan horse with a backdoor (assuming the creator of the malware wasn't completely incapable).

The best would be to completely disconnect your PC from your network and make a local backup of your important(!) files. Then reeinstall your OS.
Oh, and make sure not to use any cracked OS (e.g. cracked windows), since those always contain backdoors (e.g. to include you into a botnet).