Yes you are right they are using browser fingerprinting, but with the right tool they can easily change it. They can use Kameleo software or Multilogin etc. https://kameleo.io/