Quote from: xobloot on June 10, 2017, 02:09:59 AM

Looks to me more like a malware that changes the address in the web page you used at Coinbase. That particular wallet address shows up on the internet in the strangest places:

Alameda County Foreclosure listings:

https://www.propertyshark.com/mason/CA/Alameda-County/Trustees-Sales

Some random Wordpress blog:

https://supportantivirusblog.wordpress.com/2017/05/26/13aqmiworwr6grdfzswq1tdxdn9qkhwapd/

Here's a post on a different forum talking about a similar situation involving the exact same wallet:

https://steemit.com/bitcoin/@anubhav/bitcoin-virus-bug-hack-worm-steemitians-you-are-been-warned

I was not able to find that address on the foreclosure listing website, however I would guess that someone creating a listing had the same virus and copied something from their clipboard when they created the listing.

The third site is a warning to others and is somewhat expected.

The Wordpress site seems to be designed for what is likely SEO purposes. It is possible that the creator of the virus created that site in the hopes that people would google that address find that site and call those customer support numbers (assuming those phone numbers are some kind of scam).