Researchers Intercept Corporate Secrets Sent to Abandoned 'No-Reply' Domains

Two security researchers purchased inexpensive abandoned domains, including noreply.net and deleteduser.com, and configured them to capture incoming emails. They discovered that hundreds of companies were unknowingly routing sensitive corporate information to these unmonitored addresses. Businesses routinely send automated emails from no-reply addresses without verifying whether those domains are still privately owned. The experiment exposed a widespread and largely overlooked security vulnerability in standard corporate email practices.