So
1P24xfd96qvMzLN81qxNhgPn2pm8Efa5AG is supposed to be the address in your receive tab? Yes?
But
the fact that the UTXO was already spent strongly indicates that there's someone else who's in control of that address.
What do you mean with "clipboard hijacking"?
-snip-
Btw. I just checked the address on Google and check what I see about the address : https://bitref.com/1P24xfd96qvMzLN81qxNhgPn2pm8Efa5AG What does it mean? How the money came there and 2 min later are gone?
1. It's a virus or program that can alter your machine's clipboard (
where the copied files were stored) to change the paste result,
it usually looks for possible bitcoin addresses and change it to his address, the most latest ones even generates the same few first and last characters of the original address to fool the victim.
2. With enough programming skills, anyone can program a "
forwarder" that can send bitcoins right after the specified addresses received bitcoins.
And the way that the destination address
3Ksti3jfX7Vb6FUZW4mWZbazyFcAeyjkCy had been receiving funds from different addresses looks similar to a hacker's forwarding address.
Based from your reply, the sender can't be the culprit.