what is that icon in the bottom right? i've never seen that in electrum

First of all that mnemonic is not valid bip39 according to electrum but it is according to the ian coleman site. Regardless you can still create a bip39 wallet with it in electrum. The way to do this is to make sure to click on options and choose bip39 in the seed entry step and in the next step choose native segwit as the derivation path. If you do this you will get addresses that match the bip84 derivation path option on iancoleman's site (m/84'/0'/0'/0).

That mnemonic is also a valid electrum seed so if you don't click on options and check bip39 electrum will use a different method to convert to the binary seed (2 in the op) and as a result you get different addresses.

So overall you have to pay attention to details like these.

it uses bip84 for bech32 addresses. only one account is used (0').

https://github.com/bitcoin/bips/blob/master/bip-0084.mediawiki

keystore.py has code relevant to derivation paths but it's a bit of a mess really. there's no one function or set of constants AFAICT. it's spread out.

making money is the reason for it.

Use your operating system's search tool to look for files named "default_wallet" or "wallet.dat"

looks like you have malware on your system

If you have any one address' private key and the xpub you can recover the private keys of all the addresses in the electrum wallet.

You can report the transaction to cops in your local area.

Apologies. You are correct. That's a different error message (non standard transaction one)

@OP When this happens it's usually because users are confusing mbtc with btc. So I suggest choosing btc under tools > preferences > general tab > base unit and trying again.

Actually you have to pass True to that function for change addresses.

@OP I suggest you restore from seed on an offline PC and then do the cold storage dance:

http://docs.electrum.org/en/latest/coldstorage.html

This is the way to spend from cold storage in electrum.

If you insist on exporting the private key then understand that knowledge of the private key + your xpub gives an attacker complete access to your wallet. So it is not safe. But if you want to do it anyway then you will still need to restore from seed on an offline PC, run the command LoyceV gave you (with the small modification I mentioned above) until that address shows up in your wallet (how to check). Then simply right click on it on the addresses tab (view > show addresses) and choose to view the priv key

See here for why a poem is a bad idea here: https://bitcointalk.org/index.php?topic=311000.msg3345309#msg3345309

Why do you think someone who stole your entire safe couldn't open it at their leisure?

This error message usually means that the server you are connected to is malicious in nature and blocking your spending transaction. You should just learn to switch servers properly (hint you have to right click and choose use server). Try one of the bauerj ones.

there is no such thing as a public xpub address. xpubs are not addresses. they are extended public keys. usually you don't make them public though since doing so makes it possible for anyone with the xpub to see all your transactions. it also lowers your security a little.

2fa wallet is a 2 of 3 multisig wallet so there are 3 xpubs not just one. note that trusted coin controls one of the xpub's corresponding xprv. so be very careful here. you don't want to hand out this xpub and find that you don't have access to the corresponding xprv that lets you spend the coins.

so what are you trying to do exactly?

so look under D drive like it says in the config file. Note you can use file > open or click on the browse button on the startup screen of electrum to open a different wallet. you can also do file > save copy to save a copy of the wallet file. this is easier than digging through the file system looking for it.

old versions are deliberately crashed because they are unsafe.

and write down the seed words using pen and paper.

open is not a linux command and linux apps are not stored under /applications so i'm guessing the op is using macos.

Do check your browser history to confirm that you downloaded electrum from download.electrum.org. Add a bookmark in your browser to https://electrum.org and always use that when downloading electrum.

Then you should remove that wallet file from your file system to prevent accidental use: http://docs.electrum.org/en/latest/faq.html#where-is-my-wallet-file-located

When you next run electrum it should let you create a new wallet. This time follow this guide.

electrum can generate a seed on your own pc. you don't have to use some random website for that. idk why you did it like this but this is likely the source of the compromise.

did someone tell you to do it like this? blame that person.