Of course, the easiest way is to have your developers provide you a list of JS that include logic to make server requests. If not possible, then if it were me I would first examine the comparison between JS downloaded by the script and what was captured with Fiddler. Then, I would review the JS content myself.