[craftit]

I've read applications like little snitch are popular enough that some malware changes their behavior if it detects it. It must be a non-trivial number. I do personally out of curiosity to see what connections are being made.