ZoneAlarm.

Yeah, about ZoneAlarm, i have horror stories of that thing. I remember, years ago, it was warning me of "inbound attacks," which i then reported to ISPs, which then deleted customer services (i got email confirmation that this was happening). I later found out, while debugging connections, that the IPs it was reporting were not the ones actually sending me traffic (which, at the time, was probably "IP Messenger," ut I was a good little 12 year old and reported everything), it was blocking loopbacks to the HTTP server i was just starting to learn about, and reporting them as obscure external IPs (possibly websites i've been to). This seems to have been a bug, but it took them a long time to remove it (i only found out from people that continued to use it that it was "fixed," but i really have no direct evidence).

That said, GOG probably is phoning home, as i think someone used wireshark to ID this earlier in the post, which is a well known and stable network debugging tool.

1. Battletech is unity title. All unity games, according to unity's eula, are able to connect to unity's servers on 1st launch https://unity3d.com/legal/privacy-policy

2. Its game with galaxy features. According to community-driven research, they tend to "phone" GoG, even if you dont have galaxy installed: https://www.gog.com/forum/general/what_is_gog_stance_on_telemetry (but, as I've noticed, you already visited this thread)

Anyway - added this title to my semi-abandoned gogmix, thanks for note