System apps connecting to infected website X8-H Plus

I recently installed the excellent no-root firewall app NetGuard, available in Playstore. I'm not rooted but this app does let you allow or prevent system and root services from accessing the net as a whole or just to individual or a range of IP's. I haven't blocked any system apps or services so far but just monitoring their behaviour and some of it disturbs me. Here's an example:

15.02 - 09/02/2016 - SettingsMbox connected via TCP to webservice.webxml.com.cn:80

Many others including Android...

System apps connecting to infected website X8-H Plus