Our eZ Studio demo installations are sending notifications to noreply@ez.no (see attachment). This is still configured somewhere as default.

This should be replaced by some address that does not exist. We already get many of those by older eZ Publish installations, sometimes along with customer data (name, e-mail, what they ordered etc.).