On 30.10.2012 19:52, Michal Trojnara wrote:
You were clever enough to send the email via TOR, but not enough to subscribe the mailing list via TOR.
He also seems unable to avoid giving the same e-mail address in the faked response:
From: Michal Trojnara [email protected]
that already appeared in the original request:
From: magali morales [email protected]
The latter seems to have actually been sent through Google, sans TOR:
Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=74.125.83.48; helo=mail-ee0-f48.google.com; [email protected]; [email protected] Received: from mail-ee0-f48.google.com (mail-ee0-f48.google.com [74.125.83.48]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by linode.mirt.net (Postfix) with ESMTPS id 557541C123 for [email protected]; Thu, 25 Oct 2012 20:04:18 +0200 (CEST)
You might want to involve the abuse contacts there, too.
Regards, J. Bern