While looking at some incoming malware, we noticed a trojan-downloader that downloaded additional malware from www.norton-kaspersky.com. Very funny. We've seen a similar domain (norton-kaspersky.ru) used by other downloaders already in December.
If you're a sysadmin, you might want to filter your traffic to that domain.
The same IP also has other interesting hosts, including www.spamh0use.com, www.norton-av2007.com, and www.kusik-tusik-traff.com.