Probably I have to go the path and build a strace binary to monitor what this strange https process is actually doing...