Public facing SMTP, Tor hidden service for IMAP, all on a VPS and domain paid for with tumbled cc? Unless you worry about your ISP knowing you use Tor (there are some ways around that, kinda), I can't imagine how they'd DA you.

E: ... aside from some sort of Tor-based attack, of course.

i would say this. how about we use crypto to pay for a vps. then install tor on it and over that, an email server.

i can imagine this being not a difficult endeavour