no-reply is a good practice. No business should ever encourage their customers to reply to the emails they are sending out. That's what scammers do.

To contact the company you should go to company website at the address you know (which shouldn't be given in email as well), log in and send a message through internal message system, possibly referring to the email that you recieved through a random code (those can be auto-suggested if they recently tried to contact you by email).

If you do anything else your communication knwowingly mimics communication of a scammer.

Unrequested email should always only be one way communication. Email is too untrustworthy for it to be anything more.