Probably javascript files planted on php.net are being pulled from servers behind those domains.