That's not definitive proof the account was sold, as was already discussed in this thread.


If the account+email was hacked/sold it makes sense trying the email route, because the email is in the possession of the person who probably has the escrowed funds, and that's what everyone is after. Might as well forget the "real" master-P in this scenario, because he won't be able to do anything for anyone; he may be dealt with later, the important thing now is getting funds back to people.