There's a few of these floating around, for most social networking sites, and for some banks and the likes of PayPal etc.
/edit
The IP btw, belongs to solutionsbeyond.com and wickedleo.com (URL doesn't work if you replace the IP with either of these domain names though, indicating it's the server itself that's been compromised)