# Researcher buys noreply.net domain, lands companies' confidential emails

A security researcher purchased the expired domain noreply.net, which many companies use as a sender address for automated emails without verifying ownership. As a result, the researcher now receives sensitive internal information and secrets sent by those companies to other parties. The incident exposes a widespread flaw in how organizations configure email systems.

**Importance:** 4/5

## Sources

### Technology
- [Ars Technica](https://arstechnica.com/security/2026/08/a-researcher-bought-noreply-net-companies-started-sending-him-secrets/) — Mon, 10 Aug 2026 14:25:50 +0000