I'm increasingly sure that most residential proxies are... involuntary residential proxies.
From a very cursory look at the Google breakdown, it looks as if devices connect out on port 8000 to a specific domain. In my increasingly paranoid setup of my firewall, I'm leaning towards blocking all outbound ports other than the very small number that facilitate regular browsing. I'm almost surprised that malware would use a non-standard port since it makes it easier to identify as outlier traffic.
I'm increasingly sure that most residential proxies are... involuntary residential proxies.
From a very cursory look at the Google breakdown, it looks as if devices connect out on port 8000 to a specific domain. In my increasingly paranoid setup of my firewall, I'm leaning towards blocking all outbound ports other than the very small number that facilitate regular browsing. I'm almost surprised that malware would use a non-standard port since it makes it easier to identify as outlier traffic.