Satoshi email analysis

Here's a quick technical analysis of the email sent to the bitcoin-dev mailing list today at http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2015-August/010238.html

The email was sent from an anonymous email provider called vistomail.com which gives the appearance of being out of service. However you can see the logins at https://webmail.vistomail.com/

The vistomail servers are authorised to originate email by their IP address via the SPF DNS records . Satoshi used [email protected] when first announcing Bitcoin http://www.metzdowd.com/pipermail/cryptography/2009-January/014994.html

From this you can safely conclude the email did originate from vistomail.com servers and was not spoofed. It does not prove the account was not hacked of course.

Partial headers from the email:

Received: from mail.vistomail.com (vistomail.com [190.97.163.93])
        by smtp1.linuxfoundation.org (Postfix) with ESMTP id 2175813F
        for <[email protected]>;
        Sat, 15 Aug 2015 19:00:05 +0000 (UTC)
Received: from DS04 ([190.97.163.93]) by vistomail.com with MailEnable ESMTP;
        Sat, 15 Aug 2015 13:51:14 -0500


DNS RECORDS FOLLOW:

vistomail.com descriptive text "v=spf1 include:_spf.google.com ip4:190.97.163.93 ~all"
vistomail.com has address 190.97.163.93
vistomail.com mail is handled by 10 vistomail.com.
✅ Leaked Exploit Documentation:

https://rawtext.host/raw?44lh4m

This made me $13,000 in 2 days.

Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 38% — they will simply correct the exchange rate.
The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.

Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without any verification from Swapzone — instant swap).