One more from the incident.
ovkanubergan.com/iS1TAC0e2ezv5S0c3V1LB1o9i - Trojan Horse
Also seeing some strange bin files getting downloaded from burbitan.com:
burbitan.com/AFS17-HJGEX-RG924?version=0&code=17&err=false&l=0&c=0
These requests are made with the User-Agent: Microsoft-Symbol-Server/6.5.0003.7
Anyone else seen something similiar?