Even with a nulled script it still is quite easy for a developer to find your site down to simple things like directory structure or certian words that will appear on pages that google has indexed and can then be searched on. Plus there are also some cowboy Nullers/groups out there that dont know what they are doing.