Researcher discovers companies sending secrets to noreply.net domain — Trace