hey nice analysis, how did you found all those info only with the tx? especially that the coin are mixed, i want to know please
Since the unconfirmed and double-spend transactions are removed by now, it is no longer possible to see this. I opened the transaction in Blockchain.info. If advanced mode is enabled it showed me the unconfirmed input with a small red
U. I clicked on the corresponding links to get to the parent transaction.
The parent transaction was a transaction with many inputs and many outputs. It's parent transactions had a similar shape. The coin values were more or less random. The transaction was originally sent by Blockchain (usually the origin IP is not accurate at all but if it says they sent it, it should be accurate). All these point very clearly showed that it used the Blockchain.info mixing service. Here is an example for how such a transaction looks like: edd0626aab907e4eb41cd132f457ebc0411458f0532b5233681692b03c2e81d9
I followed the chain of unconfirmed inputs simply by clicking on the input with the
U. Until I got to a transaction, where all inputs were confirmed. This was the transaction that was double-spent by the transaction I posted. Again Blockchain.info provided the link to this transaction and this is what I posted.
IIRC, the double-spend was sent about 20 minutes after the initial mixing transaction and it has a much higher fee (0.01 instead of 0.0005).