[quote='880441022, jzilske, /thread/817599?answerId=880441022#880441022, /profile/jzilske'] I was using a wi-fi that basically blocks everything [/quote] Hey hey! And, yeah, I see stuff like that all the time (-: [quote='880441022, jzilske, /thread/817599?answerId=880441022#880441022, /profile/jzilske'] apparently the connection is secured using some sort of pinning [/quote] Interesting. The weird part about this is your suspicion that the traffic is coming from within the web view, but it’s not obvious code running in the web view — so JavaScript, basically — could implement pinning. So, I think it’d be worthwhile double checking the origin of this network connection. With mitmproxy you should be able to get the source IP and port number of the request. And you can then use RVI to track the originating process. RVI puts this in packet metadata, which you can display by running tcpdump with the -k option. See the tcpdump man page for details. Share and Enjoy — Quinn “The Eskimo!” @ Developer