To be clear, the suspicious domains above aren't connected to the Chinese regional DNS resolver warning.

I'm gonna point people smarter than me at that to hunt down and peer at, but it's surely not good.