[BorisMelnik]

could be phishing or a "negative SEO" attack

if the domains being forwarded have had penalties it could leak into your domain SEO value

could also be a mistake :)