The algorithm considers someone using Tor or VPNs as "suspect"