check if you have a file called "network_security_config.xml". It might be too restrictive for example, allowing cleartext only for specific domains or missing mobile-network specific permissions