'No-fly list' leaked online