stumbled on this late last night and yeah, fingerprinting is likely the culprit here. its not just your ip anymore; theyre looking at browser headers ...
Commenting to find later
Can confirm