I thought it was nonsense that the exchange was taking coins and making a master-node. Then it happened to me. My CBS has not shown up for 14 hours now yet they have transferred it 3 times and now it's sitting in a MN with IP Address 80.64.131.241.
Their wallet address is: Cfes7ac1XqM24JriTLxsfyVu66HtMEGZrE
Here's a list of wallets they stole from to make that node: