@p i wonder how the tcp packages look. one could filter for "windows send this package" back in the day, maybe the scrapers do have some unique fingerprints as well.