Not sure, I think it is the real address.... definitely the viewer wanting to contact 10.15.2.32:80, everything else is happy translating and going through the socks5 thing.
Just wondered if there was something in the viewer to disable to stop it doing that because this seems to ignore the viewer socks5 proxy setting.