scrapers and scrappers probing weak microsoft firewall to read your ports, any cookies that are saved, any user agent browser fingerprint, mac address of the device, black listed low cost vpn servers that already have a history of us use and general association with ddos attacks and malware, detecting the use of a vpn at all, chain analysis of your transactions leading back to coinbase