Legitimate? Anything like that is at least one of two kinds of painfully obvious trap, namely:

1. It’s some kind of criminal operation looking to commit industrial espionage, collect credentials, etc.
2. It’s not actually anonymous, and is in fact being used by the company to root out and get rid of insufficiently loyal employees.