The router must be doing something but since it is only this one site it must be something unusual.
Depends how much work you want to do. You could try to run wireshark and capture traffic with the router in the path and not. Maybe you get lucky and something will stand out. I suspect the actual traffic stream will be encrypted so if the problem is in the application you won't be able to see it and you will be back to guessing the cause.