I'm using Chrome at Windows and with TCPView (of the SysInternals freeware suit) I see that chrome.exe establish connections to these IPs:
Using http://www.ipaddresslocation.org/ I check about these IPs and see they're related to Google.
Now, in order to clarify, these are the exact things I do:
Open up chrome, the default page is set to BLANK (i.e no homepage whatsoever).
Then I get into my website which has a blank page, so no "other" http requests are made.
Right from this point there is a persistent connection, usually to '18.104.22.168'.
What are these?? Very suspicious..
- I'm in 'incognito' mode right from start, when launching Chrome, using a shortcut with the '-incognito' switch.
- I've turned off all phishing protections and other "advance" features in order to reduce Chrome's network activity.