Got to this point by running the APK in sandbox and tracking the TCP packets...