I think it's worth recording and timestamping the`whois` reports for these domains today. Many were updated -- within minutes or hours of each other. It feels like they're all controlled by the same decision maker. If you don't timestamp these as they are right now, will lose that this activity occurred in response to this post since someone can decide to update later in a less suspicious manner.