Hello,
after some research i can see some suspicious DNS entries, are they normal?

They are normal when you have users that use Google Chrome.
It is a way to detect if there is a DNS server that returns the address of an advertisement page for every invalid domain name, as some internet providers do.