Paul Wright Wojciech Trocki ran into this again recently here's the list. The origins/redirects are defined in this PR where I did some more testing for both iOS and Android - https://github.com/aerogear/mobile-services-installer/pull/36/files#diff-1a7a7be145a38177388538bc8f43fa04R44