Grep all files for http if you think it might be connecting to something. look for a file named index use burp to sniff traffic. Anbox works, check the routerspace writeuup if you find strings/documents, check for base64 and cyberchef magic