Since few weeks several people have talked about a malicious script they've got from a plugin or something else. He replaced on their screen the actual deposit address displayed by a fake one. They said they've easily blocked the script with adblock but IMO it's better to double check with another device (a smartphone or another computer). Maybe you've been victim of this malicious script.