Ad domains being cloaked through CNAME records is really common nowadays (actively used by Adobe, Criteo and Eulerian, etc), and most analytics and ad software providers employ these tactics.
https://portswigger.net/daily-swig/web-trackers-using-cname-...
https://medium.com/nextdns/cname-cloaking-the-dangerous-disg...