I was watching a program on PPlive earlier and casually logged into Douban. Since the cookies had been cleared recently, I had to re-enter my email and password. After browsing Douban for a while, ZoneAlarm suddenly issued a security alert — PPlive was sending my email and password to 60.183.15.127! The first pop-up warning was about sending my email address to 60.183.15.127. I thought it was ZoneAlarm acting up, so I clicked "No." But then a second warning popped up, this time indicating that the content being sent included my Douban password! This situation seemed to have happened once before.
My question is, is PPlive stealing my various IDs and passwords, or is there another explanation?