This is how they get you, alongside with "residential proxy" services they use. They appear to be benign browsers from various homes.